Re-Victimization from Police-Auctioned Cell Phones

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

May 16, 2023 0 Comments Countless smartphones seized in arrests and searches by police forces across the United States are being auctioned online without first having the data on them erased, a practice that can lead to crime victims being …

Microsoft Patch Tuesday, May 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

May 9, 2023 0 Comments Microsoft today released software updates to fix at least four dozen security holes in its Windows operating systems and other software, including patches for two zero-day vulnerabilities that are already being exploited in active attacks. …

Feds Take Down 13 More DDoS-for-Hire Services

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The U.S. Federal Bureau of Investigation (FBI) this week seized 13 domain names connected to “booter” services that let paying customers launch crippling distributed denial-of-service (DDoS) attacks. Ten of the domains are reincarnations of DDoS-for-hire services the FBI seized in …

$10M Is Yours If You Can Get This Guy to Leave Russia

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The U.S. government this week put a $10 million bounty on the head of a Russian man who for the past 18 years operated Try2Check, one of the cybercrime underground’s most trusted services for checking the validity of stolen credit …

Promising Jobs at the U.S. Postal Service, ‘US Job Services’ Leaks Customer Data

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A sprawling online company based in Georgia that has made tens of millions of dollars purporting to sell access to jobs at the United States Postal Service (USPS) has exposed its internal IT operations and database of nearly 900,000 customers. …

Many Public Salesforce Sites are Leaking Private Data

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A shocking number of organizations — including banks and healthcare providers — are leaking private and sensitive information from their public Salesforce Community websites, KrebsOnSecurity has learned. The data exposures all stem from a misconfiguration in Salesforce Community that allows …

3CX Breach Was a Double Supply Chain Compromise

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

We learned some remarkable new details this week about the recent supply-chain attack on VoIP software provider 3CX. The lengthy, complex intrusion has all the makings of a cyberpunk spy novel: North Korean hackers using legions of fake executive accounts on …

Giving a Face to the Malware Proxy Service ‘Faceless’

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

For the past seven years, a malware-based proxy service known as “Faceless” has sold anonymity to countless cybercriminals. For less than a dollar per day, Faceless customers can route their malicious traffic through tens of thousands of compromised systems advertised …

Why is ‘Juice Jacking’ Suddenly Back in the News?

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

KrebsOnSecurity received a nice bump in traffic this week thanks to tweets from the Federal Bureau of Investigation (FBI) and the Federal Communications Commission (FCC) about “juice jacking,” a term first coined here in 2011 to describe a potential threat …

Microsoft (& Apple) Patch Tuesday, April 2023 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released software updates to plug 100 security holes in its Windows operating systems and other software, including a zero-day vulnerability that is already being used in active attacks. Not to be outdone, Apple has released a set of …