Top IT Security Bloggers

Krebs on Security

  • Convicted ID Thief, Tax Fraudster Now Fugitive

    Krebs on Security
    In April 2014, this blog featured a story about Lance Ealy, an Ohio man arrested last year for buying Social Security numbers and banking information from an underground identity theft service that relied in part on data obtained through a company owned by big-three credit bureau Experian. Earlier this week, Ealy was convicted of using the data to fraudulently claim tax refunds with the IRS in the names of more than 175 U.S. citizens, but not before he snipped his monitoring anklet and skipped town.

  • Microsoft Releases Emergency Security Update

    Krebs on Security
    Microsoft today deviated from its regular pattern of releasing security updates on the second Tuesday of each month, pushing out an emergency patch to plug a security hole in all supported versions of Windows. The company urged Windows users to install the update as quickly as possible, noting that miscreants already are exploiting the weaknesses to launch targeted attacks.

  • Link Found in Staples, Michaels Breaches

    Krebs on Security
    The breach at office supply chain Staples impacted roughly 100 stores and was powered by some of the same criminal infrastructure seen in the intrusion disclosed earlier this year at Michaels craft stores, according to sources close to the investigation.

  • Amazon: Spam Nation one of “Best of Month”

    Krebs on Security
    A quick update on my new book, Spam Nation, The Inside Story of Organized Cybercrime -- From Global Epidemic to Your Front Door: Amazon has named it to their "Best Books of the Month" picks for November. In addition, my publisher has graciously extended the free ZeusGard offer until Nov. 25 for the next 500 people who order more than one copy of the book.

  • ‘Microsoft Partner’ Claims Fuel Support Scams

    Krebs on Security
    You can't make this stuff up: A tech support company based in the United States that outsources its work to India says its brand is being unfairly maligned by -- wait for it.....tech support scammers based in India. In an added twist, the U.S.-based tech support firm claims that the trouble is related to its admittedly false statements about being a Microsoft Certified Partner -- a common claim among telephone-based tech support scams.

  • Network Hijackers Exploit Technical Loophole

    Krebs on Security
    Spammers have been working methodically to hijack large chunks of Internet real estate by exploiting a technical and bureaucratic loophole in the way that various regions of the globe keep track of the world's Internet address ranges.

  • Adobe, Microsoft Issue Critical Security Fixes

    Krebs on Security
    Adobe and Microsoft today each issued security updates to fix critical vulnerabilities in their software. Microsoft pushed 14 patches to address problems in Windows, Office, Internet Explorer at .NET, among other products. Separately, Adobe issued an update for its Flash Player software that corrects at least 18 security issues.

  • Home Depot: Hackers Stole 53M Email Addreses

    Krebs on Security
    As if the credit card breach at Home Depot didn't already look enough like the Target breach: Home Depot said yesterday that the hackers who stole 56 million customer credit and debit card accounts also made off with 53 million customer email addresses.

  • Feds Arrest Alleged ‘Silk Road 2′ Admin, Seize Servers

    Krebs on Security
    Federal prosecutors in New York today announced the arrest and charging of a San Francisco man they say ran the online drug bazaar and black market known as Silk Road 2.0. In conjunction with the arrest, U.S. and European authorities have jointly seized control over the servers that hosted Silk Road 2.0 marketplace.

  • Still Spamming After All These Years

    Krebs on Security
    A long trail of spam, dodgy domains and hijacked Internet addresses leads back to a 37-year-old junk email purveyor in San Diego who was the first alleged spammer to have been criminally prosecuted 13 years ago for blasting unsolicited commercial email.