New Malware Campaign Delivers Remcos RAT Through Multi-Stage Windows Attack
SHADOW#REACTOR is a malware campaign using VBS, PowerShell, and MSBuild to stealthily deploy Remcos RAT with…
[Webinar] Securing Agentic AI: From MCPs and Tool Access to Shadow API Key Sprawl
Learn how to secure agentic AI workflows, MCPs, and prevent shadow API key sprawl. Register for…

Android TV Streaming Box Botnet?
Superbox streams unlimited content, but security risks include relaying traffic tied to cybercrime. Experts warn of…

Meet Rey, Admin of Scattered Lapsus$ Hunters
Technical operator of Scattered LAPSUS$ Hunters tracked down and identified after series of opsec failures. 15…

SMS Phishers Pivot to Points, Taxes, Fake Retailers
SMS phishing campaigns are evolving, using fake rewards, taxes, and e-commerce to steal payment card data…

Drones to Diplomas: Russian University Linked to $25M Essay Mill
An academic cheating network connected to a Russian university building drones for the war in Ukraine.

Microsoft Patch Tuesday, December 2025 Edition – Security Updates
Microsoft releases December 2025 Patch Tuesday updates addressing 56 security flaws, including a zero-day and publicly…

Most Parked Domains Now Serving Malicious Content
A study reveals over 90% of parked domains redirect to scams and malware, highlighting the dangers…

Happy 16th Birthday, KrebsOnSecurity.com!
KrebsOnSecurity.com celebrates its 16th anniversary with a recap of the year’s coverage of cybercrime and a…

Who Benefited from the Aisuru and Kimwolf Botnets?
An investigation into the beneficiaries of the Aisuru and Kimwolf botnets, including proxy services and individuals…













