KrebsonSecurity

KrebsonSecurity KrebsonSecurity is a cybersecurity news blog founded and written by investigative journalist Brian Krebs. The site focuses on computer security, cybercrime, data breaches, identity theft, and related legal and law enforcement actions, and it has reported extensively on incidents involving major companies and security incidents. KrebsonSecurity's reporting has intersected with numerous Federal Bureau of Investigation, United States Secret Service, Europol operations, and private-sector actors in the technology industry.

History

KrebsonSecurity was launched by Brian Krebs after his work with The Washington Post and reporting on cybercrime exposed networks tied to credit card theft and phishing campaigns, drawing attention from entities like Visa, Mastercard, Verizon and Microsoft. Early coverage included investigations that overlapped with operations by the U.S. Department of Justice, U.S. Secret Service, Interpol, and independent security firms such as Mandiant, Symantec, and Kaspersky Lab. Over time, Krebs cultivated sources among investigators at Police Service of Northern Ireland, Metropolitan Police Service, and private investigators associated with firms like CrowdStrike and FireEye. The blog's evolution paralleled developments in standards set by organizations like PCI Security Standards Council and regulatory actions by agencies such as the Federal Trade Commission.

Content and Coverage

KrebsonSecurity publishes long-form investigative posts, technical analyses, and breaking news about incidents impacting entities including Yahoo!, Equifax, Target Corporation, Home Depot, and Sony Pictures Entertainment. Coverage frequently addresses criminal marketplaces on platforms tied to actors investigated by FBI Cyber Division, Department of Homeland Security, and private-sector incident response teams at Secureworks and Palo Alto Networks. Articles detail exploitation techniques associated with vulnerabilities disclosed by groups like CERT Coordination Center and researchers at Google Project Zero, and often cite malware families analyzed by specialists formerly at McAfee and Trend Micro.

Notable Investigations

Krebs's reporting exposed cybercriminal infrastructures and operations that implicated actors investigated in cases by the U.S. Attorney General and prosecutor offices connected to incidents affecting firms such as Neiman Marcus and Target Corporation. Noteworthy articles covered large-scale data breaches at companies like Equifax, investigations into botnets tied to Conficker, and the takedown of carding forums referenced in inquiries by INTERPOL and regional law enforcement including the Royal Canadian Mounted Police. Coverage of web-hosting and DDoS services drew attention from providers such as Cloudflare, Akamai Technologies, and hosting companies implicated in refuge for criminal services. Krebs's series on underground economies highlighted marketplaces examined by researchers at University of Maryland, Carnegie Mellon University, and Stanford University.

Reception and Impact

KrebsonSecurity has been cited by mainstream outlets including The New York Times, The Wall Street Journal, BBC News, Reuters, and Bloomberg for investigative reporting on breaches that prompted regulatory inquiries by bodies such as the Securities and Exchange Commission and policy responses from legislators in the United States Congress. The blog's revelations influenced security practices at corporations such as Sony Corporation, Target Corporation, and Equifax and informed threat intelligence used by vendors like Cisco Systems and IBM Security. Academic researchers at institutions like Massachusetts Institute of Technology, Harvard University, and University of Cambridge have referenced Krebs's findings in studies on cybercrime and online fraud. Awards and recognition have connected Krebs's work with peers at outlets including Wired, Ars Technica, and The Guardian.

Legal Issues and Controversies

KrebsonSecurity and Brian Krebs have been embroiled in disputes concerning hosting, publication of leaked data, and exposure of infrastructure, drawing responses from internet service providers like Verizon, Comcast, and hosting companies investigated by regulators such as the Federal Communications Commission. Legal matters intersected with litigation trends involving cybersecurity reporting, defamation claims litigated in courts influenced by precedents from cases involving The New York Times Company and broadcasting standards overseen by entities like Federal Trade Commission. High-profile reporting occasionally provoked backlash from online actors connected to forums investigated by law enforcement in multiple jurisdictions including Russia, Ukraine, and Estonia.

Category:Cybersecurity Category:Security blogs Category:Investigative journalism