DOGE Denizen Marko Elez Leaked API Key for xAI

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Marko Elez, a 25-year-old employee at Elon Musk’s Department of Government Efficiency (DOGE), has been granted access to sensitive databases at the U.S. Social Security Administration, the Treasury and Justice departments, and the Department of Homeland Security. So it should …

UK Arrests Four in ‘Scattered Spider’ Ransom Group

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Authorities in the United Kingdom this week arrested four people aged 17 to 20 in connection with recent data theft and extortion attacks against the retailers Marks & Spencer and Harrods, and the British food retailer Co-op Group. The breaches …

Microsoft Patch Tuesday, July 2025 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released updates to fix at least 137 security vulnerabilities in its Windows operating systems and supported software. None of the weaknesses addressed this month are known to be actively exploited, but 14 of the flaws earned Microsoft’s most-dire …

Big Tech’s Mixed Response to U.S. Treasury Sanctions

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

In May 2025, the U.S. government sanctioned a Chinese national for operating a cloud provider linked to the majority of virtual currency investment scam websites reported to the FBI. But a new report finds the accused continues to operate a …

Senator Chides FBI for Weak Advice on Mobile Security

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Agents with the Federal Bureau of Investigation (FBI) briefed Capitol Hill staff recently on hardening the security of their mobile devices, after a contacts list stolen from the personal phone of the White House Chief of Staff Susie Wiles was …

Web Hacking Service ‘Araneida’ Tied to Turkish IT Firm

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Cybercriminals are selling hundreds of thousands of credential sets stolen with the help of a cracked version of Acunetix, a powerful commercial web app vulnerability scanner, new research finds. The cracked software is being resold as a cloud-based attack tool …

How to Lose a Fortune with Just One Bad Click

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

December 18, 2024 0 Comments Image: Shutterstock, iHaMoo. Adam Griffin is still in disbelief over how quickly he was robbed of nearly $500,000 in cryptocurrencies. A scammer called using a real Google phone number to warn his Gmail account was …

How Cryptocurrency Turns to Cash in Russian Banks

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A financial firm registered in Canada has emerged as the payment processor for dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services aimed at Russian-speaking customers, new research finds. Meanwhile, an investigation into the Vancouver street address used by …

Patch Tuesday, December 2024 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released updates to plug at least 70 security holes in Windows and Windows software, including one vulnerability that is already being exploited in active attacks. The zero-day seeing exploitation involves CVE-2024-49138, a security weakness in the Windows Common …

U.S. Offered $10M for Hacker Just Arrested by Russia

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

In January 2022, KrebsOnSecurity identified a Russian man named Mikhail Matveev as “Wazawaka,” a cybercriminal who was deeply involved in the formation and operation of multiple ransomware groups. The U.S. government indicted Matveev as a top ransomware purveyor a year …