Crickets from Chirp Systems in Smart Lock Key Leak

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

April 15, 2024 0 Comments The U.S. government is warning that smart locks securing entry to an estimated 50,000 dwellings nationwide contain hard-coded credentials that can be used to remotely open any of the locks. The lock’s maker Chirp Systems …

Why CISA is Warning CISOs About a Breach at Sisense

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

April 11, 2024 0 Comments The U.S. Cybersecurity and Infrastructure Security Agency (CISA) said today it is investigating a breach at business intelligence company Sisense, whose products are designed to allow companies to view the status of multiple third-party online …

Twitter’s Clumsy Pivot to X.com Is a Gift to Phishers

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

On April 9, Twitter/X began automatically modifying links that mention “twitter.com” to redirect to “x.com” instead. But over the past 48 hours, dozens of new domain names have been registered that demonstrate how this change could be used to craft …

April’s Patch Tuesday Brings Record Number of Fixes

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

If only Patch Tuesdays came around infrequently — like total solar eclipse rare — instead of just creeping up on us each month like The Man in the Moon. Although to be fair, it would be tough for Microsoft to …

Fake Lawsuit Threat Exposes Privnote Phishing Sites

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A cybercrook who has been setting up websites that mimic the self-destructing message service privnote.com accidentally exposed the breadth of their operations recently when they threatened to sue a software company. The disclosure revealed a profitable network of phishing sites …

‘The Manipulaters’ Improve Phishing, Still Fail at Opsec

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Roughly nine years ago, KrebsOnSecurity profiled a Pakistan-based cybercrime group called “The Manipulaters,” a sprawling web hosting network of phishing and spam delivery platforms. In January 2024, The Manipulaters pleaded with this author to unpublish previous stories about their work, …

Thread Hijacking: Phishes That Prey on Your Curiosity

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Thread hijacking attacks. They happen when someone you know has their email account compromised, and you are suddenly dropped into an existing conversation between the sender and someone else. These missives draw on the recipient’s natural curiosity about being copied …

Recent ‘MFA Bombing’ Attacks Targeting Apple Users

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

March 26, 2024 0 Comments Several Apple customers recently reported being targeted in elaborate phishing attacks that involve what appears to be a bug in Apple’s password reset feature. In this scenario, a target’s Apple devices are forced to display …

Mozilla Drops Onerep After CEO Admits to Running People-Search Networks

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

March 22, 2024 0 Comments The nonprofit organization that supports the Firefox web browser said today it is winding down its new partnership with Onerep, an identity protection service recently bundled with Firefox that offers to remove users from hundreds …

The Not-so-True People-Search Network from China

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

It’s not unusual for the data brokers behind people-search websites to use pseudonyms in their day-to-day lives (you would, too). Some of these personal data purveyors even try to reinvent their online identities in a bid to hide their conflicts …