Krebs on Security

DECEMBER 3, 2024

Currently, there are around 2,500 registrars authorized to sell domains by the Internet Corporation for Assigned Names and Numbers (ICANN), the California nonprofit that oversees the domain industry. John Levine is author of the book “The Internet for Dummies” and president of CAUCE.

Cybercrime 300

Cybercrime Phishing Accountability Internet 300

Schneier on Security

APRIL 8, 2025

internet providers, including AT&T, Lumen (formerly CenturyLink), and Verizon, to access systems they use for facilitating customer data to law enforcement and governments. The hacks reportedly may have resulted in the “vast collection of internet traffic”; from the telecom and internet giants.

Telecommunications 245

Telecommunications Internet Internet Government 245

Penetration Testing

JUNE 2, 2025

A sophisticated malware campaign targets Korean Internet cafs with Gh0st RAT and CoinMiner, hijacking systems for crypto mining. ASEC urges immediate action.

Internet 80

Internet Internet Malware Cryptocurrency 80

Schneier on Security

MARCH 14, 2025

There is a new botnet that is infecting TP-Link routers: The botnet can lead to command injection which then makes remote code execution (RCE) possible so that the malware can spread itself across the internet automatically.

Manufacturing 287

Manufacturing Healthcare Malware Internet 287

Krebs on Security

OCTOBER 17, 2024

Prosecutors say Anonymous Sudan offered a “Limited Internet Shutdown Package,” which would enable customers to shut down internet service providers in specified countries for $500 (USD) an hour. An indictment in the Central District of California notes the duo even swamped the websites of the FBI and the Department of State.

DDOS 270

DDOS Government Internet Internet 270

Krebs on Security

FEBRUARY 28, 2025

BEARHOST prides itself on the ability to evade blocking by Spamhaus , an organization that many Internet service providers around the world rely on to help identify and block sources of malware and spam. Kaspersky did not respond to repeated requests for comment. Image: cidr-report.org.

Malware 262

Malware Antivirus Software DDOS 262

Krebs on Security

MAY 29, 2025

A graphic from the FBI explaining how Funnull generated a slew of new domains on a regular basis and mapped them to Internet addresses on U.S. cloud providers. based cloud networks, as doing so can result in blocking access to many legitimate web destinations that are also on that same shared network segment or host.

Scams 223

Scams Internet Internet Cybercrime 223

Schneier on Security

OCTOBER 14, 2024

It gets installed by exploiting more than 20,000 common misconfigurations, a capability that may make millions of machines connected to the Internet potential targets, researchers from Aqua Security said. Perfectl in an impressive piece of malware: The malware has been circulating since at least 2021.

Malware 259

Malware Cryptocurrency Internet Internet 259

Schneier on Security

FEBRUARY 12, 2025

Had this been an actual attack, they would have modified the code in those buckets to contain malware and watch as it was incorporated in different software builds around the internet. This is basically the SolarWinds attack, but much more extensive. But there’s a second dimension to this attack.

Malware 292

Malware Software Internet Internet 292

Schneier on Security

JUNE 9, 2025

The details are interesting, and worth reading in detail: >Tracking code that Meta and Russia-based Yandex embed into millions of websites is de-anonymizing visitors by abusing legitimate Internet protocols, causing Chrome and other browsers to surreptitiously send unique identifiers to native apps installed on a device, researchers have discovered.

Mobile 275

Mobile Internet Internet 275

Schneier on Security

APRIL 3, 2025

The CIA triad has evolved with the Internet. the Internet of today. For example, the 5G communications revolution isn’t just about faster access to videos; it’s about Internet-connected things talking to other Internet-connected things without our intervention. The first iteration of the Web—Web 1.0

Artificial Intelligence 250

Artificial Intelligence Architecture Internet Internet 250

Schneier on Security

APRIL 28, 2025

The case centred around a Windscribe-owned server in Finland that was allegedly used to breach a system in Greece.

VPN 239

VPN Internet Internet Data collection 239

Security Affairs

JUNE 9, 2025

To reduce exposure to unauthorized residential proxy networks, monitor home network traffic, check IoT devices for suspicious activity, avoid unofficial app stores, and keep all systems updated, especially by patching known and internet-facing vulnerabilities promptly. Indicators of BADBOX 2.0

IoT 145

IoT Internet Internet Advertising 145

Krebs on Security

FEBRUARY 6, 2025

The device information shared, combined with the user’s Internet address and data gathered from mobile advertising companies , could be used to deanonymize users of the DeepSeek iOS app, NowSecure warned. “Since this protection is disabled, the app can (and does) send unencrypted data over the internet.”

Risk 303

Risk Artificial Intelligence Mobile Encryption 303

WIRED Threat Level

MAY 14, 2025

Following a WIRED inquiry, Telegram banned thousands of accounts used for crypto scam money laundering, including those of Haowang Guarantee, a black market that enabled over $27 billion in transactions.

Marketing 100

Marketing Internet Internet Scams 100

Krebs on Security

JANUARY 14, 2025

“What makes this vulnerability so impactful is the fact that it is remotely exploitable, so attackers can reach the compromised machine(s) over the internet, and the attacker does not need significant knowledge or skills to achieve repeatable success with the same payload across any vulnerable component,” Hopkins wrote.

Artificial Intelligence 290

Artificial Intelligence Social Engineering Encryption Internet 290

Krebs on Security

JUNE 10, 2025

For a detailed breakdown on the individual security updates released by Microsoft today, check out the Patch Tuesday roundup from the SANS Internet Storm Center. The latest Chrome update fixes two zero-day exploits in the browser (CVE-2025-5419 and CVE-2025-4664).

Software 196

Software Engineering Internet Internet 196

Krebs on Security

MAY 20, 2025

The brief attack appears to have been a test run for a massive new Internet of Things (IoT) botnet capable of launching crippling digital assaults that few web destinations can withstand. KrebsOnSecurity last week was hit by a near record distributed denial-of-service (DDoS) attack that clocked in at more than 6.3

DDOS 293

DDOS IoT Internet Internet 293

Krebs on Security

DECEMBER 19, 2024

Cyber threat analysts at Silent Push said they recently received reports from a partner organization that identified an aggressive scanning effort against their website using an Internet address previously associated with a campaign by FIN7 , a notorious Russia-based hacking group.

Hacking 249

Hacking Cybercrime Advertising Data breaches 249

Security Affairs

OCTOBER 19, 2024

North Korea-linked group APT37 exploited an Internet Explorer zero-day vulnerability in a supply chain attack. “Successful exploitation of this vulnerability requires an attacker to first prepare the target so that it uses Edge in Internet Explorer Mode.”

Internet 143

Internet Internet Engineering Malware 143

Krebs on Security

MAY 14, 2025

.” Two other zero-days patched by Microsoft today also were elevation of privilege flaws: CVE-2025-32709 , which concerns afd.sys, the Windows Ancillary Function Driver that enables Windows applications to connect to the Internet; and CVE-2025-30400 , a weakness in the Desktop Window Manager (DWM) library for Windows.

Artificial Intelligence 192

Artificial Intelligence Internet Internet Phishing 192

The Hacker News

MAY 28, 2025

Embedded Linux-based Internet of Things (IoT) devices have become the target of a new botnet dubbed PumaBot. Rather than scanning the internet, the malware retrieves a list of targets from a command-and-control (C2) server

IoT 118

IoT Internet Internet Malware 118

The Hacker News

MAY 9, 2025

authorities has dismantled a criminal proxy network that's powered by thousands of infected Internet of Things (IoT) and end-of-life (EoL) devices, enlisting them into a botnet for providing anonymity to malicious actors. A joint law enforcement operation undertaken by Dutch and U.S.

IoT 138

IoT Internet Internet 138

Security Affairs

NOVEMBER 14, 2024

“This flaw allows an unauthenticated attacker to inject arbitrary shell commands through crafted HTTP GET requests, affecting over 61,000 devices on the Internet.” The experts observed roughly 1,100 Internet-facing devices potentially vulnerable to this issue., .” reads the post published by Netsecfish.

DNS 116

DNS Internet Internet Hacking 116

Krebs on Security

AUGUST 27, 2024

Malicious hackers are exploiting a zero-day vulnerability in Versa Director , a software product used by many Internet and IT service providers. Researchers believe the activity is linked to Volt Typhoon , a Chinese cyber espionage group focused on infiltrating critical U.S. In a security advisory published Aug. victims and one non-U.S.

Internet 342

Internet Internet Technology Engineering 342

Krebs on Security

NOVEMBER 12, 2024

For a more detailed breakdown of today’s patches from Microsoft, check out the SANS Internet Storm Center’s list. Any one of these bugs could be used to install malware if an authenticated user connects to a malicious or hacked SQL database server.

Authentication 277

Authentication Engineering Malware Passwords 277

Zero Day

MAY 12, 2025

With over 52 million daily active users and over 100,000 active communities, Reddit is a primary source of news, entertainment, and advice. Can it endure in the AI era?

Internet 95

Internet Internet 95

Schneier on Security

MAY 30, 2025

It’s a folk belief, all over the Internet but with no actual research behind it—like the five-second rule when you drop food on the floor. It presumes people have the cognitive tools to understand the myriad potential attacks and figure out which one of the thousands of Internet actions they take is harmful.

Cybersecurity 227

Cybersecurity Scams Security Awareness Phishing 227

SecureWorld News

DECEMBER 17, 2024

However, when improperly configured or left exposed to the internet, HMIs become prime targets for cyberattacks. According to Casey Ellis, Founder and Advisor at Bugcrowd, safety-critical control systems like HMIs "should never be on the Internet." Exposing HMI systems to the Internet can have serious consequences," Raju explains.

Internet 109

Internet Internet Risk Passwords 109

Krebs on Security

FEBRUARY 11, 2025

” The SANS Internet Storm Center has a handy list of all the Microsoft patches released today, indexed by severity. .” “This trademark linguistic ducking and weaving may be Microsofts way of saying ‘if we told you any more, wed give the game away,'” Barnett said.

Artificial Intelligence 213

Artificial Intelligence Engineering Software Internet 213

Security Affairs

DECEMBER 21, 2024

The bot conducts ad fraud by accessing websites in the background and operates as a residential proxy, sharing the users internet connection for criminal activities, which can link the users IP address illegal activities. BadBox can also download additional payloads, amplifying the risks for the users.

Firmware 143

Firmware Malware Internet Internet 143

Schneier on Security

AUGUST 29, 2024

Remember that talk was given in 1982, less than a year before the ARPANET switched to TCP/IP and the internet went operational. (Note that there are two parts.) It’s a wonderful talk: funny, engaging, wise, prescient. She was a remarkable person.

Engineering 340

Engineering Internet Internet 340

Malwarebytes

JANUARY 22, 2025

The MotW is an attribute added to files by Windows when they have been sourced from an untrusted location, like the internet or a restricted zone. Always be careful when opening archived files that you downloaded from the internet. 7-Zip added support for MotW in June 2022.

Internet 144

Internet Internet Malware Risk 144

Security Affairs

NOVEMBER 16, 2024

In particular, we recommend that you ensure that access to the management interface is possible only from trusted internal IPs and not from the Internet. In particular, we recommend that you immediately ensure that access to the management interface is possible only from trusted internal IPs and not from the Internet. 173.239.218[.]251

Firewall 128

Firewall Internet Internet VPN 128

Security Affairs

MAY 28, 2025

The threat intelligence firm uncovered a stealth campaign on March 18, 2025, where attackers gained persistent access to thousands of internet-exposed ASUS routers. ” states GreyNoise. ” reads the report published by GreyNoise.

Firmware 135

Firmware Internet Internet Hacking 135

Malwarebytes

APRIL 14, 2025

Since the empty folder is generally associated with an Internet Information Services (IIS) feature that most users will not be running, this called for an explanation. Internet Information Services (IIS) is a web server platform created by Microsoft to host websites, web applications, and services on Windows systems.

Internet 120

Internet Internet Authentication Accountability 120

The Last Watchdog

MAY 6, 2025

Related: Why crypto-agility is a must have Sinha While the web-based PKI systemgoverned by browsers and certificate authoritieshas served the public internet well, its limitations are becoming evident in tightly regulated, high-assurance environments like banking. LW: Why does the financial sector need a new PKI standard?

Healthcare 147

Healthcare Banking Internet Internet 147