Author Archives: BrianKrebs

The Value of a Hacked Company

Posted on by

Most organizations only grow in security maturity the hard way — that is, from the intense learning that takes place in the wake of a costly data breach. That may be because so few company leaders really grasp the centrality of computer and network security to the organization’s overall goals and productivity, and fewer still have taken an honest inventory of what may be at stake in the event that these assets are compromised. Continue reading The Value of a Hacked Company→

Adobe, Microsoft Patch Critical Security Bugs

Posted on by

Adobe has pushed out a critical update to plug at least 52 security holes in its widely-used Flash Player browser plugin, and another update to patch holes in Adobe Reader. Separately, Microsoft released 11 security updates to fix vulnerabilities more than 40 flaws in Windows and related software. Continue reading Adobe, Microsoft Patch Critical Security Bugs→

Serial Swatter, Stalker and Doxer Mir Islam Gets Just 1 Year in Jail

Posted on by

Mir Islam, a 21-year-old Brooklyn man who pleaded guilty to an impressive array of cybercrimes including cyberstalking, “doxing” and “swatting” celebrities and public officials (as well as this author), was sentenced in federal court today to two years in prison. Unfortunately, thanks to time served in this and other cases, Islam will only see a year of jail time in connection with some fairly heinous assaults that are becoming all too common. Continue reading Serial Swatter, Stalker and Doxer Mir Islam Gets Just 1 Year in Jail→

1,025 Wendy’s Locations Hit in Card Breach

Posted on by

At least 1,025 Wendy’s locations were hit by a malware-driven credit card breach that began in the fall of 2015, the nationwide fast-food chain said Thursday. The announcement marks a significant expansion in a data breach that is costing banks and credit unions plenty: Previously, Wendy’s had said the breach impacted fewer than 300 locations. Continue reading 1,025 Wendy’s Locations Hit in Card Breach→

Scientology Seeks Captive Converts Via Google Maps, Drug Rehab Centers

Posted on by

Fake online reviews generated by unscrupulous marketers blanket the Internet these days. Although online review pollution isn’t exactly a hot-button consumer issue, there are plenty of cases in which phony reviews may endanger one’s life or well-being. This is the story about how searching for drug abuse treatment services online could cause concerned loved ones to send their addicted, vulnerable friends or family members straight into the arms of the Church of Scientology. Continue reading Scientology Seeks Captive Converts Via Google Maps, Drug Rehab Centers→

How to Spot Ingenico Self-Checkout Skimmers

Posted on by

A KrebsOnSecurity story last month about credit card skimmers found in self-checkout lanes at some Walmart locations got picked up by quite a few publications. Since then I’ve heard from several readers who work at retailers that use hundreds of thousands of these Ingenico credit card terminals across their stores, and all wanted to know the same thing: How could they tell if their self-checkout lanes were compromised? This post provides a few pointers. Continue reading How to Spot Ingenico Self-Checkout Skimmers→

Rise of Darknet Stokes Fear of The Insider

Posted on by

With the proliferation of shadowy black markets on the so-called “darknet” — hidden crime bazaars that can only be accessed through special software that obscures one’s true location online — it has never been easier for disgruntled employees to harm their current or former employer. At least, this is the fear driving a growing stable of companies seeking technical solutions to detect would-be insiders. Continue reading Rise of Darknet Stokes Fear of The Insider→

FBI Raids Spammer Outed by KrebsOnSecurity

Posted on by

Michael A. Persaud, a California man profiled in a Nov. 2014 KrebsOnSecurity story about a convicted junk email artist currently identified by anti-spam activists as one of the world’s Top 10 Worst Spammers, was reportedly raided by the FBI in connection with a federal spam investigation. Continue reading FBI Raids Spammer Outed by KrebsOnSecurity→