About:
Brian Krebs is a former Washington Post reporter with a passion for computer security and investigative reporting.
Website:
Specializations:
Interests:
Incoming Links:
Subscribe to RSS:
The post uncovers the identity and activities of Dort, the operator of the Kimwolf botnet, revealing his transition from gaming to serious cybercrime.
The blog post discusses the cybercriminal group 'Scattered LAPSUS$ Hunters' (SLSH) and its public face, Rey, who has recently revealed his identity. The group has been involved in extorting major corporations by stealing data and ...
SLSH uses extreme harassment tactics to extort companies, and experts warn that paying them only encourages further abuse without guarantees of data recovery.
KrebsOnSecurity.com celebrates its 16th anniversary by reflecting on impactful cybercrime investigations and urging reader support for continued reporting on digital security issues.
Handala, an Iranian hacktivist group, claims responsibility for a massive data-wiping attack on Stryker, disrupting operations in 79 countries as retaliation for a missile strike.
Microsoft's March 2026 Patch Tuesday addresses 77 vulnerabilities, including critical flaws and highlights the role of AI in identifying security issues.
AI assistants like OpenClaw enhance productivity but pose serious security risks, necessitating robust protective measures to prevent data breaches and misuse.
Starkiller is a phishing service that proxies real login pages, enabling cybercriminals to capture user credentials and bypass MFA protections with ease.
The Kimwolf botnet has gained unauthorized access to the Badbox 2.0 control panel, posing a significant threat to millions of infected devices.
The Kimwolf botnet, infecting over 2 million devices, poses a serious threat to corporate and government networks by exploiting residential proxies and unsecured Android TV boxes.
Kimwolf, a new botnet infecting Android TV devices, exploits them for DDoS attacks and proxy services, revealing a network of cybercriminal activity and proxy providers.
The Kimwolf botnet has infected millions of devices by exploiting vulnerabilities in unsecured Android TV boxes and residential proxy networks, posing significant security risks.
The Trump administration's recent policy shifts threaten cybersecurity, free speech, and consumer protections, raising concerns about civil liberties and corruption.
Infoblox's study shows that over 90% of parked domains now lead to scams and malware, highlighting the risks of typosquatting and expired domains.
The article investigates a vast academic cheating network linked to a Kremlin-connected oligarch, generating nearly $25 million in revenue through Google Ads. It explores how the Nerdify brand, despite claiming to uphold an 'honor...
The Superbox media streaming devices, sold at retailers like BestBuy and Walmart for around $400, promise unlimited access to over 2,200 streaming services without monthly fees. However, security experts warn that these devices re...
The Kimwolf botnet has overwhelmed the I2P network, causing significant disruptions as it attempts to use the network for fallback communications amid ongoing takedown efforts.
China-based phishing groups are now offering phishing kits for creating fake e-commerce websites that steal customer payment information. These groups are using SMS messages to lure victims with offers of unclaimed tax refunds and...
Microsoft released security updates addressing over 60 vulnerabilities in its Windows operating systems and supported software, including a zero-day bug (CVE-2025-62215) that is currently being exploited. The updates also fix a gl...
Microsoft's February 2026 Patch Tuesday addresses over 50 security vulnerabilities, including six critical zero-day flaws affecting Windows and related software.
Microsoft's January 2026 Patch Tuesday addresses 113 vulnerabilities, including critical flaws actively exploited, emphasizing the need for rapid patching and security awareness.
Microsoft's December 2025 Patch Tuesday addresses 56 security flaws, including critical vulnerabilities in Office and a zero-day bug affecting Windows systems.
On November 18, Cloudflare experienced an outage that temporarily took many major websites offline. Some customers managed to redirect their domains away from Cloudflare, but this action may have exposed them to security vulnerabi...
Mozilla announced the end of its partnership with Onerep, an identity protection service, after concerns were raised about Onerep's founder, Dimitiri Shelest, who has created multiple people-search services. Despite this, Mozilla ...