Top IT Security Bloggers

Krebs on Security

  • Target Hackers Hit Third Parking Service

    Krebs on Security
    Book2Park.com, an online parking reservation service for airports across the United States, appears to be the latest victim of the hacker gang that stole more than a 100 million credit and debit cards from Target and Home Depot. Book2park.com is the third online parking service since December 2014 to fall victim to this cybercriminal group.

  • The Internet of Dangerous Things

    Krebs on Security
    Distributed denial-of-service (DDoS) attacks designed to silence end users and sideline Web sites grew with alarming frequency and size last year, according to new data released this week. Those findings dovetail quite closely with the attack patterns seen against this Web site over the past year.

  • FBI: Businesses Lost $215M to Email Scams

    Krebs on Security
    It’s time once again to update my Value of a Hacked Email Account graphic: According to a recent alert from the FBI, cyber thieves stole nearly $215 million from businesses in the last 14 months using a scam that starts when business executives or employees have their email accounts hijacked. Federal investigators say the so-called “business email […]

  • Yet Another Emergency Flash Player Patch

    Krebs on Security
    For the second time in a week, Adobe has issued an emergency update to fix a critical security flaw that crooks are actively exploiting in its Flash Player software. Updates are available for Flash Player on Windows and Mac OS X. Last week, Adobe released an out-of-band Flash Patch to fix a dangerous bug that […]

  • Spreading the Disease and Selling the Cure

    Krebs on Security
    When Karim Rattani isn’t manning the till at the local Subway franchise in his adopted hometown of Cartersville, Ga., he’s usually tinkering with code. The 21-year-old Pakistani native is the lead programmer for two very different yet complementary online services: One lets people launch powerful attacks that can knock Web sites, businesses and other targets offline for hours at a time; the other is a Web hosting service designed to help companies weather such assaults.

  • Flash Patch Targets Zero-Day Exploit

    Krebs on Security
    Adobe today released an important security update for its Flash Player software that fixes a vulnerability which is already being exploited in active attacks. Compounding the threat, the company said it is investigating reports that crooks may have developed a separate exploit that gets around the protections in this latest update.

  • Password Re-use Fuels Starwood Fraud Spike

    Krebs on Security
    Two different readers have written in this past week to complain about having their Starwood Preferred Guest loyalty accounts hijacked by scammers. The spike in fraud appears to be tied to a combination of password re-use and the release of tool that automates the checking of account credentials at the Web site for the popular travel rewards program.

  • Java Patch Plugs 19 Security Holes

    Krebs on Security
    Oracle this week released its quarterly patch update for Java, a widely-installed program that for most casual users has probably introduced more vulnerability than utility. If you have Java installed and require it for some application or Web site, it's time to update it. If you're not sure you have Java on your computer or are unsure why you still have it, read on for advice that could save you some security headaches down the road.

  • How Was Your Credit Card Stolen?

    Krebs on Security
    Almost once a week, I receive an email from a reader who has suffered credit card fraud and is seeking help figuring out which hacked merchant was responsible. I generally reply that this is a fruitless pursuit, and instead encourage readers to keep a close eye on their card statements and report any fraud. But it occurred to me recently that I've never published a primer on the types of card fraud and the likelihood with each of the cardholder ever learning how their account was compromised. This post is an effort to remedy that.

  • Another Lizard Arrested, Lizard Lair Hacked

    Krebs on Security
    Several media outlets are reporting that authorities in the United Kingdom early this morning arrested an 18-year-old in connection with the denial-of-service attacks on Sony Playstation and Microsoft Xbox systems over Christmas. The arrest is one of several tied to a joint U.K. and U.S. law enforcement investigation into a group calling itself the "Lizard Squad," and comes as the group's attack-for-hire online service was completely compromised and leaked to investigators.