[email protected]

A Ukrainian man indicted in 2012 for conspiring with a prolific hacking group to steal tens of millions of dollars from U.S. businesses was arrested in Italy and is now in custody in the United States, KrebsOnSecurity has learned. Sources close to the investigation say Yuriy Igorevich Rybtsov, a 41-year-old [...]

Most businesses think their security ends at their firewall. It doesn't. When you outsource critical functions, such as cloud infrastructure, payroll processing, or customer data management, you're handing sensitive information to another company's security system. This could prove to be a costly mistake that damages your company's reputation and [...]

Financial regulators in Canada this week levied $176 million in fines against Cryptomus, a digital payments platform that supports dozens of Russian cryptocurrency exchanges and websites hawking cybercrime services. The penalties for violating Canada’s anti money-laundering laws come ten months after KrebsOnSecurity noted that Cryptomus’s Vancouver street address was home [...]

Cybercriminals are abusing a widespread lack of authentication in the customer service platform Zendesk to flood targeted email inboxes with menacing messages that come from hundreds of Zendesk corporate customers simultaneously. Zendesk is an automated help desk service designed to make it simple for people to contact companies for customer [...]

As of October 14, 2025, Microsoft officially ended support for Windows 10, marking the close of an era for one of the company’s most widely used operating systems. This wasn’t just another update cycle; it was a turning point that requires your immediate attention. If your business is still [...]

Microsoft today released software updates to plug a whopping 172 security holes in its Windows operating systems, including at least two vulnerabilities that are already being actively exploited. October’s Patch Tuesday also marks the final month that Microsoft will ship security updates for Windows 10 systems. If you’re running [...]

Google has recently announced a trio of new features for Gmail users that are going into place immediately, and may in fact be available for use by the time you read this article.  Here are the details: One of the first things you'll notice is a new strikethrough button, [...]

The world’s largest and most disruptive botnet is now drawing a majority of its firepower from compromised Internet-of-Things (IoT) devices hosted on U.S. Internet providers like AT&T, Comcast and Verizon, new evidence suggests. Experts say the heavy concentration of infected devices at U.S. providers is complicating efforts to limit collateral [...]

A cybercriminal group that used voice phishing attacks to siphon more than a billion records from Salesforce customers earlier this year has launched a website that threatens to publish data stolen from dozens of Fortune 500 firms if they refuse to pay a ransom. The group also claimed responsibility [...]