Six 0-Days Lead Microsoft’s August 2024 Patch Push

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released updates to fix at least 90 security vulnerabilities in Windows and related software, including a whopping six zero-day flaws that are already being actively exploited by attackers. Image: Shutterstock. This month’s bundle of update joy from Redmond …

Cybercrime Rapper Sues Bank over Fraud Investigation

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A partial selfie posted by Puchmade Dev to his Twitter account. Yes, that is a functioning handheld card skimming device, encrusted in diamonds. Underneath that are more medallions, including a diamond-studded bitcoin and payment card. In January, KrebsOnSecurity wrote about …

Low-Drama ‘Dark Angels’ Reap Record Ransoms

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A ransomware group called Dark Angels made headlines this past week when it was revealed the crime group recently received a record $75 million data ransom payment from a Fortune 50 company. Security experts say the Dark Angels have been …

U.S. Trades Cybercriminals to Russia in Prisoner Swap

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Twenty-four prisoners were freed today in an international prisoner swap between Russia and Western countries. Among the eight Russians repatriated were several convicted cybercriminals. In return, Russia has reportedly released 16 prisoners, including Wall Street Journal reporter Evan Gershkovich and …

U.S. Trades 5 Cybercriminals to Russia in Prisoner Swap

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Twenty-four prisoners were freed today in an international prisoner swap between Russia and Western countries. Among the eight Russians repatriated were five convicted cybercriminals. In return, Russia has reportedly released 16 prisoners, including Wall Street Journal reporter Evan Gershkovich and …

Don’t Let Your Domain Name Become a “Sitting Duck”

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

More than a million domain names — including many registered by Fortune 100 firms and brand protection companies — are vulnerable to takeover by cybercriminals thanks to authentication weaknesses at a number of large web hosting providers and domain registrars, …

Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party Services

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

July 26, 2024 0 Comments Google says it recently fixed an authentication weakness that allowed crooks to circumvent the email verification required to create a Google Workspace account, and leverage that to impersonate a domain holder at third-party services that allow …

Phish-Friendly Domain Registry “.top” Put on Notice

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The Chinese company in charge of handing out domain names ending in “.top” has been given until mid-August 2024 to show that it has put in place systems for managing phishing reports and suspending abusive domains, or else forfeit its …

Global Microsoft Meltdown Tied to Bad Crowstrike Update

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

July 19, 2024 1 Comment A faulty software update from cybersecurity vendor Crowdstrike crippled countless Microsoft Windows computers across the globe today, disrupting everything from airline travel and financial institutions to hospitals and businesses online. Crowdstrike said a fix has …

Researchers: Weak Security Defaults Enabled Squarespace Domains Hijacks

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

July 15, 2024 0 Comments At least a dozen organizations with domain names at domain registrar Squarespace saw their websites hijacked last week. Squarespace bought all assets of Google Domains a year ago, but many customers still haven’t set up …