Microsoft Patch Tuesday, November 2025 Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft this week pushed security updates to fix more than 60 vulnerabilities in its Windows operating systems and supported software, including at least one zero-day bug that is already being exploited. Microsoft also fixed a glitch that prevented some Windows …

Google Sues to Disrupt Chinese SMS Phishing Triad

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Google is suing more than two dozen unnamed individuals allegedly involved in peddling a popular China-based mobile phishing service that helps scammers impersonate hundreds of trusted brands, blast out text message lures, and convert phished payment card data into mobile …

Drilling Down on Uncle Sam’s Proposed TP-Link Ban

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

November 9, 2025 0 Comments The U.S. government is reportedly preparing to ban the sale of wireless routers and other networking gear from TP-Link Systems, a tech company that currently enjoys an estimated 50% market share among home users and …

Cloudflare Scrubs Aisuru Botnet from Top Domains List

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

For the past week, domains associated with the massive Aisuru botnet have repeatedly usurped Amazon, Apple, Google and Microsoft in Cloudflare’s public ranking of the most frequently requested websites. Cloudflare responded by redacting Aisuru domain names from their top websites …

Alleged Jabber Zeus Coder ‘MrICQ’ in U.S. Custody

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

A Ukrainian man indicted in 2012 for conspiring with a prolific hacking group to steal tens of millions of dollars from U.S. businesses was arrested in Italy and is now in custody in the United States, KrebsOnSecurity has learned. Sources …

Aisuru Botnet Shifts from DDoS to Residential Proxies

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Aisuru, the botnet responsible for a series of record-smashing distributed denial-of-service (DDoS) attacks this year, recently was overhauled to support a more low-key, lucrative and sustainable business: Renting hundreds of thousands of infected Internet of Things (IoT) devices to proxy …

Canada Fines Cybercrime Friendly Cryptomus $176M

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada’s anti money-laundering laws come ten months …

Email Bombs Exploit Lax Authentication in Zendesk

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers simultaneously. Zendesk is an automated help desk service designed to …

Patch Tuesday, October 2025 ‘End of 10’ Edition

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least two vulnerabilities that are already being actively exploited. October’s Patch Tuesday also marks the final month that Microsoft will ship …

DDoS Botnet Aisuru Blankets US ISPs in Record DDoS

Blog WriterCybersecurity News - Original News Source is krebsonsecurity.com

The world’s largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration of infected …