Publisher
Stories with reporting from Krebs on Security, ranked by what is gaining ground now. Each story links to the original articles.
A teenager from Amman suspected of leading ShinyHunters has been detained and is reportedly cooperating with the FBI to identify other group members. The detention comes as the group is extorting a business unit recently divested by Boeing.
Krebs on SecurityMicrosoft issues updates for at least 974 security vulnerabilities in Windows and other software, its largest single patch batch to date. The company says AI helps accelerate vulnerability discovery, while security experts warn that organizations struggle to prioritize the testing of fixes.
Krebs on SecurityMicrosoft releases security updates addressing at least 398 vulnerabilities across Windows and supported software. The batch includes one flaw under active exploitation and two others that were publicly disclosed before the updates arrived.
Krebs on SecurityThe FBI is probing a dark-web identity theft service offering digital scans of more than 153 million U.S. and Canadian drivers’ licenses. Interviews with people whose licenses appear in the service indicate the images may have been taken from a widely used identity verification company based in Louisiana.
Krebs on SecurityDutch authorities arrest a 23-year-old convicted cybercriminal on suspicion of aiding data theft and extortion by ShinyHunters. After the arrest, the group escalates attacks, including stealing sensitive data from the FBI and extorting ransomware group Cl0p.
Krebs on SecurityConnor Riley Moucka, a 26-year-old Canadian man, pleads guilty to computer fraud and conspiracy in attacks targeting more than 165 organizations using Snowflake. He also admits stealing call and text history records belonging to more than 100 million AT&T customers.
Krebs on SecurityAustralian police arrest two men, aged 21 and 23, suspected of belonging to TeamPCP, a cybercrime and data-extortion group linked to a long-running series of software supply-chain attacks. The Australian Federal Police identifies the suspects as Western Australia residents but does not name them.
Krebs on SecurityA U.S. Army soldier receives 70 months in federal prison after pleading guilty to hacking telecommunications companies and stealing call and text metadata from more than 100 million AT&T customers in 2024. The sentence also orders nearly $300,000 in restitution to victims.
Krebs on SecurityAn analysis finds that generic TV streaming sticks not only rent users’ internet connections to strangers but also impersonate mobile phones to click ads on AI-generated websites. The findings concern devices marketed as offering unlimited streaming for a one-time fee.
Krebs on SecurityRadaris faces a lawsuit alleging that its people-search services violate a New Jersey privacy law by publishing personal information about state law enforcement. The law provides for substantial fines against data brokers, and the dispute results in Radaris losing domains.
Krebs on SecurityDecryptAds launches as a free service that organizes information about which entities serve ads on websites and collect data through mobile apps. It scrapes information previously difficult to parse and often held within advertising platforms.