Email Provider VFEmail Suffers ‘Catastrophic’ Hack

From krebsonsecurity.com 4 months ago in Blogs Security

Email provider VFEmail has suffered what the company is calling "catastrophic destruction" at the hands of an as-yet unknown intruder who trashed all of the company's primary and backup data in the United States. The firm's founder says he now fears some 18 years' worth of customer email may be...

Articles from Krebs on Security

Collections Firm Behind LabCorp, Quest Breaches Files for Bankruptcy

From krebsonsecurity.com 5 days ago in Blogs Security

A medical billing firm responsible for a recent eight-month data breach that exposed the personal information on nearly 20 million Americans has filed for bankruptcy, citing "enormous expenses" from notifying affected consumers and the loss of its four largest customers.

Microsoft Patch Tuesday, June 2019 Edition

From krebsonsecurity.com 2 weeks ago in Blogs Security

Microsoft on Tuesday released updates to fix 88 security vulnerabilities in its Windows operating systems and related software. The most dangerous of these include four flaws for which there is already exploit code available. There's also a scary bug affecting all...

LabCorp: 7.7 Million Consumers Hit in Collections Firm Breach

From krebsonsecurity.com 3 weeks ago in Blogs Security

Medical testing giant LabCorp. said today personal and financial data on some 7.7 million consumers were exposed by a breach at a third-party billing collections firm. That third party -- the American Medical Collection Agency (AMCA) -- also recently notified competing...

Report: No ‘Eternal Blue’ Exploit Found in Baltimore City Ransomware

From krebsonsecurity.com 3 weeks ago in Blogs Security

For almost the past month, key computer systems serving the government of Baltimore, Md. have been held hostage by a ransomware strain known as "Robbinhood." Media publications have cited sources saying the Robbinhood version that hit Baltimore city computers was...

NY Investigates Exposure of 885 Million Mortgage Documents

From krebsonsecurity.com 3 weeks ago in Blogs Security

New York regulators are investigating a weakness that exposed 885 million mortgage records at First American Financial Corp. [NYSE:FAF] as the first test of the state's strict new cybersecurity regulation. That measure, which went into effect in March 2019 and...

Canada Uses Civil Anti-Spam Law in Bid to Fine Malware Purveyors

From krebsonsecurity.com 4 weeks ago in Blogs Security

Canadian government regulators are using the country's powerful new anti-spam law to pursue hefty fines of up to a million dollars against Canadian citizens suspected of helping to spread malicious software.

Should Failing Phish Tests Be a Fireable Offense?

From krebsonsecurity.com 4 weeks ago in Blogs Security

Would your average Internet user would be any more vigilant against phishing scams if he or she faced the real possibility of losing their job after falling for one too many of these emails? Recently, I met someone at a...

First American Financial Corp. Leaked Hundreds of Millions of Title Insurance Records

From krebsonsecurity.com 1 month ago in Blogs Security

The Web site for Fortune 500 real estate title insurance giant First American Financial Corp. [NYSE:FAF] leaked hundreds of millions of documents related to mortgage deals going back to 2003, until notified this week by KrebsOnSecurity. The digitized records --...

Legal Threats Make Powerful Phishing Lures

From krebsonsecurity.com 1 month ago in Blogs Security

Some of the most convincing email phishing and malware attacks come disguised as nastygrams from a law firm. Such scams typically notify the recipient that he/she is being sued, and instruct them to review the attached file and respond within...

Account Hijacking Forum OGusers Hacked

From krebsonsecurity.com 1 month ago in Blogs Security

Ogusers[.]com -- a forum popular among people involved in hijacking online accounts and conducting SIM swapping attacks to seize control over victims' phone numbers -- has itself been hacked, exposing the email addresses, hashed passwords, IP addresses and private messages...