Hot Topics

U.S. Department of Homeland Security

DHS secretary Alejandro Mayorkas

Teenage Hackers Must be Stopped: US DHS’s CSRB Report

| | 2 factor auth, 2-factor authentication, 2fa, 2FA bypass, 2FA Flaws, 2FA phishing, 2FA policies, 2FA/MFA, cellphone fraud, CSRB, Cyber Safety Review Board, Department of Homeland Security, DHS, DUAL FACTOR AUTHENTICATION, factor auth, homeland security, Homeland Security Presidential Directive, homelandsecurity, Lapsus$, Multi-Factor Authentication, Multi-Factor Authentication (MFA), Multifactor Authentication, SB Blogwatch, SIM swap, sim swap fraud, SIM swap scams, SIM swapping, two factor authentication, U.S. Department of Homeland Security, United States Department of Homeland Security, US Homeland Security
2FA SMS FAIL: Lapsus$ social engineers exploited weak two-factor authentication. Something must be done! (Well, this is something.) ...
Security Boulevard
Trump Fires Security Chief Christopher Krebs

Trump Fires Security Chief Christopher Krebs

| | A Little Sunshine, Christopher Krebs, cisa, Cybersecurity and Infrastructure Security Agency, president trump, Rumor Control, Sen. Angus King, Sen. Richard Burr, U.S. Department of Homeland Security, Y2K
President Trump on Tuesday fired his top election security official Christopher Krebs (no relation). The dismissal came via Twitter two weeks to the day after Trump lost an election he baselessly claims ...
Krebs on Security
U.S. Govt. Makes it Harder to Get .Gov Domains

U.S. Govt. Makes it Harder to Get .Gov Domains

| | .gov, Cybersecurity and Infrastructure Security Agency, John Levine, Other, The Internet for Dummies, U.S. Department of Homeland Security, U.S. General Services Administration
The federal agency in charge of issuing .gov domain names is enacting new requirements for validating the identity of people requesting them. The additional measures come less than four months after KrebsOnSecurity ...
Krebs on Security
It’s Way Too Easy to Get a .gov Domain Name

It’s Way Too Easy to Get a .gov Domain Name

| | cisa, Cybersecurity and Infrastructure Security Agency, DOTGOV Bill, dotgov.gov, exeterri.gov, John Levine, The Coming Storm, town.exeter.ri.us, U.S. Department of Homeland Security, U.S. General Services Administration, Web Fraud 2.0
Many readers probably believe they can trust links and emails coming from U.S. federal government domain names, or else assume there are at least more stringent verification requirements involved in obtaining a ...
Krebs on Security
Secret Service Investigates Breach at U.S. Govt IT Contractor

Secret Service Investigates Breach at U.S. Govt IT Contractor

| | Dana Deasy, Data breaches, Hold Security, Julius Patterson, Miracle Systems LLC, National Institutes of Health, Perceptics, Sandesh Sharda, TrickBot, U.S. Citizenship and Immigration Services, U.S. Department of Homeland Security, U.S. Department of Transportation, U.S. Secret Service
The U.S. Secret Service is investigating a breach at a Virginia-based government technology contractor that saw access to several of its systems put up for sale in the cybercrime underground, KrebsOnSecurity has ...
Krebs on Security
A Deep Dive on the Recent Widespread DNS Hijacking Attacks

A Deep Dive on the Recent Widespread DNS Hijacking Attacks

| | A Little Sunshine, APNIC, Bill Woodcock, Cisco Talos, Comodo, CrowdStrike, Data breaches, DHS, DNSpionage, DNSSEC, EPP, extensible provisioning protocol, Farsight Security, fireeye, Frobbit, ICANN, John Crain, Key Systems, Lars Michael Jogbäck, LetsEncrypt, Netnod, Packet Clearing House, Patrik Fältström, PCH, SecurityTrails, The Coming Storm, U.S. Department of Homeland Security
The U.S. government — along with a number of leading security companies — recently warned about a series of highly complex and widespread attacks that allowed suspected Iranian hackers to siphon huge ...
Krebs on Security