Brian Krebs

Independent Investigative Journalist at Freelance

Independent investigative journalist. Author of 'Spam Nation,' a NYT bestseller. Former Washington Post reporter. Mastodon: https://t.co/fTKNavlMwp

Articles

Funding Expires for Key Cyber Vulnerability Database | OpenText Cybersecurity Community

1 week ago | community.opentextcybersecurity.com | Brian Krebs |Ryan Naraine

April 15, 2025 By Brian Krebs A critical resource that cybersecurity professionals worldwide rely on to identify, mitigate and fix security vulnerabilities in software and hardware is in danger of breaking down. The federally funded, non-profit research and development organization MITRE warned today that its contract to maintain the Common Vulnerabilities and Exposures (CVE) program — which is traditionally funded each year by the Department of Homeland Security — expires on April 16.
China-based SMS Phishing Triad Pivots to Banks

2 weeks ago | krebsonsecurity.com | Brian Krebs

China-based purveyors of SMS phishing kits are enjoying remarkable success converting phished payment card data into mobile wallets from Apple and Google. Until recently, the so-called “Smishing Triad” mainly impersonated toll road operators and shipping companies. But experts say these groups are now directly targeting customers of international financial institutions, while dramatically expanding their cybercrime infrastructure and support staff.
Cyber Forensic Expert in 2,000+ Cases Faces FBI Probe

2 weeks ago | krebsonsecurity.com | Brian Krebs

A Minnesota cybersecurity and computer forensics expert whose testimony has featured in thousands of courtroom trials over the past 30 years is facing questions about his credentials and an inquiry from the Federal Bureau of Investigation (FBI). Legal experts say the inquiry could be grounds to reopen a number of adjudicated cases in which the expert’s testimony may have been pivotal.
data extortion Archives

3 weeks ago | securityboulevard.com | Jeffrey Burt |Brian Krebs

Hunters International, the RaaS group that some believe evolved from Hive, appears to be rebranding and shifting operations, moving away from an unprofitable and risky ransomware business and focusing solely on exfiltrating ...
Security Boulevard

3 weeks ago | securityboulevard.com | Richi Jennings |Brian Krebs

Adobe has released an emergency update to address a critical security hole in its Flash Player browser plugin that is being actively exploited to deploy malicious software. If you've got Flash installed ...
How Each Pillar of the 1st Amendment is Under Attack

3 weeks ago | krebsonsecurity.com | Brian Krebs

“Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances.” -U.S. Constitution, First Amendment.
When Getting Phished Puts You in Mortal Danger

4 weeks ago | krebsonsecurity.com | Brian Krebs

Many successful phishing attacks result in a financial loss or malware infection. But falling for some phishing scams, like those currently targeting Russians searching online for organizations that are fighting the Kremlin war machine, can cost you your freedom or your life. Researchers at the security firm Silent Push mapped a network of several dozen phishing domains that spoof the recruitment websites of Ukrainian paramilitary groups, as well as Ukrainian government intelligence sites.
Arrests in Tap-to-Pay Scheme Powered by Phishing

1 month ago | krebsonsecurity.com | Brian Krebs

Authorities in at least two U.S. states last week independently announced arrests of Chinese nationals accused of perpetrating a novel form of tap-to-pay fraud using mobile devices. Details released by authorities so far indicate the mobile wallets being used by the scammers were created through online phishing scams, and that the accused were relying on a custom Android app to relay tap-to-pay transactions from mobile devices located in China.
DOGE to Fired CISA Staff: Email Us Your Personal Data

1 month ago | krebsonsecurity.com | Brian Krebs

A message posted on Monday to the homepage of the U.S. Cybersecurity & Infrastructure Security Agency (CISA) is the latest exhibit in the Trump administration’s continued disregard for basic cybersecurity protections.
ClickFix: How to Infect Your PC in Three Easy Steps

1 month ago | krebsonsecurity.com | Brian Krebs

A clever malware deployment scheme first spotted in targeted attacks last year has now gone mainstream. In this scam, dubbed “ClickFix,” the visitor to a hacked or malicious website is asked to distinguish themselves from bots by pressing a combination of keyboard keys that causes Microsoft Windows to download password-stealing malware. ClickFix attacks mimic the “Verify You are a Human” tests that many websites use to separate real visitors from content-scraping bots.