Krebs On Security
- Aisuru, the botnet responsible for a series of record-smashing distributed denial-of-service (DDoS) attacks this year, recently was overhauled to support a more low-key, lucrative and […]
- Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and […]
- Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from […]
- Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least three vulnerabilities that are already […]
- The world's largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers […]
- A cybercriminal group that used voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this year has launched a website […]
Secure World
- The cybersecurity mandate in the Healthcare and Public Health (HPH) sector has fundamentally changed. It's no longer enough to secure […]
- Cybersecurity leaders enter 2025 navigating a different kind of threat landscape, one defined as much by economic pressure as by […]
- IBM delivered a one-two punch of major announcements today, reinforcing its position at the intersection of future computing and modern […]
- The cyberattack that hit Jaguar Land Rover (JLR) in the late summer of 2025 serves as a chilling case study […]
- The newly-released Riskonnect 2025 New Generation of Risk Report paints a clear picture of progress and peril in enterprise risk […]
- Connected devices are now the fabric of modern operations, from smart buildings and retail endpoints to hospital equipment and factory […]
Dark Reading
- CVE-2025-54603 gave attackers an opening to disrupt critical operational technology (OT) environments and critical infrastructure, plus steal data from them.
- Security programs trust AI data files, but they shouldn't: they can conceal malware more stealthily than most file types.
- Ravin Academy, a school for the Iranian state hackers of tomorrow, has itself, ironically, been hacked.
- In the "PhantomRaven" campaign, threat actors published 126 malicious npm packages that have flown under the radar, while collecting 86,000 […]
- New research shows AI crawlers like Perplexity, Atlas, and ChatGPT are surprisingly easy to fool.
- A subsidiary of Japanese marketing and PR giant Dentsu lost sensitive data to unidentified threat actors, the parent company said.