← Feed

Posts

• View post

  Having lost more hours to reading criminal complaints over the years than I care to remember, I can confidently state that I have never encountered one as entertaining and complete as the one that dropped today, charging a 22 y/o Oregon man with operating "Rapper Bot," a huge IoT botnet blamed for the Twitter/X DDoS attack in March 2025. As the complaint states in delicious detail, the accused and his alleged co-conspirator discussed at length on Telegram how to stay off the radar of...

• View post

  Got some unwelcome news first thing today: Someone I've known for many years recently took their own life. Feeling angry and sad and like a shit friend because we lost touch at some point, and I had no idea of their struggles. But I definitely could have been more curious. My response so far since hearing this news has been to reach out to a few people I've not checked in w/ for a while.

• View post

  Not sure who needs to know this, but if you download and install the Windows version of Rufus, the free software for writing ISO images to USB/CD-ROM, your PC will end up with about 100 trojans. Edit: The site I downloaded from was rufus[.]ie which is apparently the official site. During installation, the software threw up a couple of rather verbose messages saying it needed to download additional components.

• View post

  Got up early today to catch a bit of the Orionid meteor shower. Had a killer view of Orion and it was very clear, but spotted only two shooting stars in about 20 min (one was bright green). But OMG are there a lot of satellites. They're most visible right after sunset or right before dawn and it was a bit distracting watching all the traffic. If you've not spent any time stargazing at these times lately, you might be surprised at how busy it's gotten up there.

• View post

  Expect quite a few sites to return error pages toay and possibly through the week. Here's my piece on the new PHP zero-day that affects about 70 percent of the Internet. We'll be updating the story with important new developments. https://krebsonsecurity.com/2026/10/widespread-php-flaw-may-cause-many-site-outages-today/ #php #zero-day #security

• View post

  These new PHP vulnerabilities are a big deal, y'all. My admin tells me in-the-wild exploitation was seen earlier today. There are apparently several proof of concept exploits floating around that let you send arbitrary commands to the server. https://arstechnica.com/security/2026/10/php-maintainers-tell-web-devs-to-prepare-themselves-for-critical-security-patches/

• View post

  Breaking, exclusive: Feds Suspect Ransom Negotiator Ran ShinyHunters Extortion Site U.S. federal investigators pursuing the ShinyHunters hacking group that recently stole highly sensitive data from the FBI have identified executives at two different ransomware negotiation firms who maintained unusually close relations with the extortion group, KrebsOnSecurity has learned. Sources close to the investigation say one of the executives in the United States even helped ShinyHunters operate a website...

• View post

  CISA has released a set of lessons learned from a cyber incident first reported by KrebsOnSecurity on May 18 wherein dozens of CISA internal passwords and govcloud credentials were exposed in a public GitHub repository marked "Private CISA" for several months. The CISA report says they immediately took steps to stop the bleeding, including: -The reported public repository was taken offline and a copy was saved for later analysis. This repository was not part of CISA’s official GitH...

• View post

  The unquenchable bloodlust of this administration is really quite something. What's next? Running man? https://www.reuters.com/world/us-livestream-army-execution-fort-hood-shooter-pentagon-official-says-2026-10-08/

• View post

  You, too, can be the "most trusted investigative journalist in digital security," only it'll cost you a couple grand. SMH

• View post

  Someone appears to have hacked the British retailer ASOS and is sending push notifications to customers stating that their data was hacked via a compromised instance at the cloud data storage provider Snowflake. Interesting direct approach, trying to get customers flooding the company with angry emails and pressure the company to pay a ransom. https://sg.finance.yahoo.com/news/asos-shares-tank-very-public-144045925.html

• View post

  This composition positively cried out for a photo. Capturing the dual reflections of the not full but still very bright moon and a few stars was bliss on our first (and only clear) night at Rehoboth Beach, Del. this past week. Taken with a late model iPhone.

• View post

  Went thru a Dunkin drive-through today and couldn't scrounge enough change to pay for a coffee in cash and felt like an ass for a second. When I handed over my credit card, the lady at the payment window handed me the payment terminal and told me how to operate it, saying select your tip amount and then hit pay. I was floored. IDK if this is Dunkin policy, but if it is that's abhorrent and embarrassing for everyone involved. Not just because I'm getting sick of everyone expecting...

• View post

  Exclusive, breaking: Dutch Police Arrest "Reformed" Hacker in ShinyHunters investigation Authorities in the Netherlands have arrested a 23-year-old convicted cybercriminal on suspicion of aiding in data thefts and extortions by the prolific hacker group ShinyHunters. In the days immediately following the suspect’s arrest, remaining ShinyHunters members dramatically escalated their attacks, stealing highly sensitive data from the FBI and extorting the Russian ransomware group Cl0p. ht...

• View post

  New, exclusive (and cathartic), from me: The consumer data broker Radaris.com has long had a reputation for ignoring requests to remove personal information from its vast empire of people-search services online. That reputation caught up with the company recently in a lawsuit alleging Radaris violated a New Jersey privacy law that provides for hefty fines against data brokers that publish personal information on state law enforcement officials. In the face of repeated stonewalling and prevarica...

• View post

  The POTUS says we're doomed

• View post

  I recently published a story about a cybersecurity startup run by Jack Burkman and Jacob Wohl, two convicted fraudsters and con men who've been selling the ability for wealthy convicts to gain a presidential pardon. 60 Minutes just featured an interview with these two in tonight's show. https://www.cbsnews.com/news/trump-pardon-economy-60-minutes-transcript/?ftag=CNM-00-10aab7d&linkId=1008528987 https://www.youtube.com/watch?v=cRxNh21Edr0 https://www.cbsnews.com/news/trump-pardon-...

• View post

  Guess which of the bazillion tabs open in my browser is consuming the largest amount of system RAM by far? Ten points if you guessed LinkedIn. Resource Monitor said the tab was consuming a whopping 1.6 gigs of memory just now. In fairness, I guess all that tracking and AI garbage does require a lot of resources.

• View post

  Golly, you can practically smell the cognitive dissonance happening here. I wonder who it could be?

• View post

  Breaking, exclusive and spicy, from me: A new identity theft service launched on the dark web this week is selling digital scans of more than 153 million drivers licenses from people in the United States and Canada. Based on interviews with individuals whose licenses are available for purchase on this service, it appears to be siphoning images collected by a widely-used identity verification company based in Louisiana. KrebsOnSecurity also has learned that the New Orleans field office of the Fe...

• View post

  I love how the reason for all the proposed new data centers is about "winning the AI race with China." Meanwhile opposing the creation of new data centers means you fell for China's bot farm propaganda that is seeking to turn public opinion against US advancement in AI. The implication is that people who oppose new data centers are both anti-American and gullible tools.

• View post

  Today's story is the result of an ungodly amount of research, and I am very glad to finally be able to share it with you. Authorities in Australia have arrested two men believed to be members of TeamPCP, a prolific cybercrime and data extortion group blamed for perpetrating the longest running spree of software supply chain attacks ever. In a statement released today, the Australian Federal Police (AFP) said two unnamed suspects from Western Australia, aged 21 and 23, were arrested in con...

• View post

  The fastest way to get VIP treatment when you land...seriously, how dumb do you have to be to try something like this? This person on Reddit stole my thoughts verbatim: "committing federal crimes from inside a sealed metal tube that lands exactly where the feds are waiting is certainly a strategy." https://www.reddit.com/r/delta/comments/1vl52vr/dl591_lasatl_arrival_met_by_federal_agents/

• View post

  I'm not in Vegas this week, but I've been trying to keep up w/ the most interesting stuff. I'm reading this timeline from LinkedIn that summarizes the talk about how OpenAI's agents started weakening their own guardrails and finding ways to communicate and scheme to get further access and privileges. The talk is on Youtube now and is well worth a watch, despite being a little too jargony for such a sensitive and important topic. https://www.youtube.com/watch?v=87DyyMV0kCY I&#3...

• View post

  New, by me: Canadian Man Pleads Guilty in Snowflake Data Extortions: A 26-year-old Canadian man described as one of the most consequential cybercrime threat actors of 2024 has pleaded guilty to computer fraud and conspiracy to hack and extort more than 165 organizations that used the cloud data storage provider Snowflake. Connor Riley Moucka, of Kitchener, Ontario, also admitted to stealing call and text history records of more than 100 million AT&T customers. https://krebsonsecurity.com/2...

• View post

  Another wave of sultry followers with no followers. I guess @jerry@infosec.exchange will be subtracting from my follower count again soon lol.

• View post

  @Natasha_Jay@tech.lgbt Finally, a technological answer to a hypothetical asked by Amazon Women on the Moon: What if women had access to a system for reviewing the past romantic behaviors of their soon-to-be date. This skit was so prescient, but I doubt they were going for that. https://www.youtube.com/watch?v=KkkyB88PtFk

• View post

  War? What war? Inflation? Ba humbug, says the market, which continues to get high smoking AI crack 24/7. https://finance.yahoo.com/markets/stocks/articles/ray-dalio-ai-bubble-nearing-070000246.html?guccounter=1&guce_referrer=aHR0cHM6Ly93d3cuZHJ1ZGdlcmVwb3J0LmNvbS8&guce_referrer_sig=AQAAAGLxIUmN2Vn0mF29H5oTDHkQDST87dGyetRmtKK9UUTQ1FjPqoav1ZNII_U6fvzYDlngYxoVohivgg9WhsXRrn8crCFOszNN2AMEiQSBr-97134KCu6su7t3xybD22Cvej8wlNXTzx9QeElfaihi3s2z6zMfR22H41oSt82tjTDT

• View post

  I love Signal for a lot of reasons, but one aspect of it that is consistently frustrating (although I doubt unique to Signal) is how many times I get contacted by a stranger with a username that is nothing more than dash or a couple of dots for usernames (or even blank), with disappearing messages set to 8 hours or something. Only to find out later I've spoken with this person previously. This becomes more problematic when the person reaching out is already somewhat nervous/paranoid about...

• View post

  Like a broken clock, even people still on X are right once or twice a day.