120 stories on the front page, newest first. Scroll down to watch the site change over time.
251 points by Bender | 148 comments
KrebsOnSecurity report that federal investigators suspect a U.S. ransomware negotiation firm executive helped run the ShinyHunters group's extortion website.
16 points by Bender | 3 comments
KrebsOnSecurity article reporting that the U.K. sanctioned Cryptomus, a crypto platform allegedly used to launder cybercrime proceeds and help Russia evade sanctions.
69 points by speckx | 15 comments
KrebsOnSecurity report that a Jordanian teen suspected of leading ShinyHunters was detained while extorting a former Boeing business unit and is cooperating with the FBI.
780 points by speckx | 504 comments
KrebsOnSecurity article on research showing generic TV streaming boxes rent out users' internet connections and spoof mobile phones to commit ad fraud on AI-generated sites.
374 points by DemiGuru | 388 comments
KrebsOnSecurity article reporting that LG plans to suspend webOS smart TV apps that turn TVs into residential proxy nodes, after research found such SDKs in over 42% of apps.
433 points by LelouBil | 171 comments
KrebsOnSecurity article reporting that a CISA contractor kept a public GitHub repository exposing privileged AWS GovCloud credentials and internal CISA system details.
369 points by air7 | 196 comments
KrebsOnSecurity blog post explaining that many ransomware strains refuse to install on Windows systems with Russian or other CIS-language virtual keyboards installed.
849 points by todsacerdoti | 457 comments
KrebsOnSecurity article reporting that code linked to DOGE employee Marko Elez matches GitHub repositories cited by an NLRB whistleblower alleging data exfiltration.
584 points by whalesalad | 216 comments
KrebsOnSecurity article on an NLRB security architect's whistleblower claim that DOGE staff exfiltrated gigabytes of sensitive case data using short-lived accounts.
843 points by todsacerdoti | 541 comments
A Krebs on Security article examining how each of the First Amendment's protections—speech, press, religion, assembly, petition—is facing threats.
365 points by todsacerdoti | 231 comments
KrebsOnSecurity article reporting that U.S. federal agents linked a $150 million cryptocurrency heist to master passwords cracked from the 2022 LastPass breach.
1519 points by mmsc | 1489 comments
KrebsOnSecurity investigation reporting that a 19-year-old on Musk's DOGE team with access to US government systems was previously part of the cybercrime community 'The Com'.
925 points by todsacerdoti | 228 comments
KrebsOnSecurity article on a MasterCard DNS server misconfiguration, a typo'd nameserver domain that went unnoticed for nearly five years until a researcher registered it.
322 points by todsacerdoti | 323 comments
KrebsOnSecurity article from December 2024 about how a single malicious click led a victim to lose a fortune, likely via phishing and account takeover.
329 points by todsacerdoti | 183 comments
KrebsOnSecurity investigation suggesting the hacker Kiberphant0m, linked to Snowflake customer data extortions, may be a U.S. Army soldier stationed in South Korea.
379 points by vdddv | 212 comments
KrebsOnSecurity article on phishing attacks that abuse Apple's password reset feature to flood devices with prompts, followed by calls spoofing Apple support.
549 points by todsacerdoti | 142 comments
KrebsOnSecurity investigation finding that the CEO of data-removal service Onerep.com, operating from Belarus and Cyprus, founded dozens of people-search sites.
841 points by todsacerdoti | 312 comments
KrebsOnSecurity article reporting that Experian still lets identity thieves hijack consumer accounts by simply re-registering them with a different email address.
374 points by todsacerdoti | 286 comments
KrebsOnSecurity article on Micfo CEO Amir Golestan being sentenced to five years for using shell companies to fraudulently obtain over 735,000 IP addresses from ARIN.
339 points by LinuxBender | 104 comments
KrebsOnSecurity article reporting that Barracuda is telling customers to physically replace, rather than patch, Email Security Gateway appliances hit by a zero-day.
50 points by cm_silva | 10 comments
