Volt Typhoon Malware: US Critical Infrastructure Breached

In a recent revelation, the U.S. government disclosed that the Chinese state-sponsored hacking group, Volt Typhoon has surreptitiously infiltrated critical infrastructure networks within the country for a staggering five-year period. This embedded ...
U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer

U.S. Govt. Apps Bundled Russian Code With Ties to Mobile Malware Developer

A recent scoop by Reuters revealed that mobile apps for the U.S. Army and the Centers for Disease Control and Prevention (CDC) were integrating software that sends visitor data to a Russian company ...
U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise

U.S. Treasury, Commerce Depts. Hacked Through SolarWinds Compromise

Communications at the U.S. Treasury and Commerce Departments were reportedly compromised by a supply chain attack on SolarWinds, a security vendor that helps the federal government and a range of Fortune 500 ...
STAR Webcast: Spooky RYUKy: The Return of UNC1878

FBI, DHS, HHS Warn of Imminent, Credible Ransomware Threat Against U.S. Hospitals

On Monday, Oct. 27, KrebsOnSecurity began following up on a tip from a reliable source that an aggressive Russian cybercriminal gang known for deploying ransomware was preparing to disrupt information technology systems ...
NY Charges First American Financial for Massive Data Leak

NY Charges First American Financial for Massive Data Leak

In May 2019, KrebsOnSecurity broke the news that the website of mortgage title insurance giant First American Financial Corp. had exposed approximately 885 million records related to mortgage deals going back to ...

Monday, July 30: Dtex, Insider Threat, Privacy in the News: California Data Breach Horror Stories Feature Vulnerable Insiders, Trump Administration Focusing on Privacy Regulation

Last week, VentureBeat reporter Chris O’Brien took a deep look at some of our research about leading causes of data breaches in the State of California. In Daily horrors of cybersecurity detailed ...