Top all-time · #9
Brian Krebs
Personal blog · krebsonsecurity.comsecuritydata
Brian Krebs writes Krebs on Security, a personal blog at krebsonsecurity.com about security and data. Since 2010, 1,439 different Hacker News readers have linked it 3,201 times, most often “Try This One Weird Trick Russian Hackers Hate”. It is still writing: the last post was on 2026-10-21, and you can follow it by feed.
Rarely recommended · 3 of 40 sampled comments recommend it?
Why HN links it
HN readers link Brian Krebs's security blog for its investigations of breaches, botnets, fraud and skimmers, and cite single posts as sources in threads.
- Recommended for · 3 comments
- one calls a breach analysis good; one calls the Great Cannon article excellent; one points to his skimmer articles
Summarised by Claude from a sample of 40 HN comments that link here. Each comment is marked recommending, critical or neutral (citing without judging); how this works.
Most-linked posts?
- Try This One Weird Trick Russian Hackers Hate26 people · 27 mentions · first linked 2021-05-17
- Krebsonsecurity.com has an expired SSL certificate23 people · 25 mentions · first linked 2016-12-02
- Teen on Musk's DOGE team graduated from 'The Com'19 people · 20 mentions · first linked 2025-02-08
- Google: Security Keys Neutralized Employee Phishing18 people · 20 mentions · first linked 2018-07-23
- Microsoft buys corp.com so bad guys can’t11 people · 11 mentions · first linked 2020-04-07
- /2018/05/tracking-firm-locationsmart-leaked-location-data-for-customers-of-all-major-u-s-mobile-carriers-in-real-time-via-its-web-site/11 people · 11 mentions · first linked 2018-05-17
- The New Normal: 200-400 Gbps DDoS Attacks10 people · 11 mentions · first linked 2014-02-15
- FBI Probes Service Selling 153M+ Drivers Licenses10 people · 10 mentions · first linked 2026-09-01
- Krebs on Security is down again, after record DDoS and move to Project Shield10 people · 10 mentions · first linked 2013-05-28
- Who’s behind Wednesday’s epic Twitter hack?9 people · 10 mentions · first linked 2020-07-16
What Hacker News says?
It's everywhere online https://krebsonsecurity.com/2017/08/twitter-bots-use-likes-r...
Comment linking /2017/08/twitter-bots-use-likes-rts-for-intimidation/
on “Biden wins White House, vowing new direction for divided U.S.”Submitted Whistleblower: Ubiquiti Breach “Catastrophic” as a story · 1944 points
HN discussionKrebs has an article with evidence on this phenomena as well: https://krebsonsecurity.com/tag/twitter-bots/ Edit: Specifically https://krebsonsecurity.com/2017/08/twitter-bots-use-likes-r...
Comment linking /2017/08/twitter-bots-use-likes-rts-for-intimidation/
on “Biden wins White House, vowing new direction for divided U.S.”Submitted Teen on Musk's DOGE team graduated from 'The Com' as a story · 1624 points
HN discussion> Did CISA signal to MITRE that they weren't going to exercise the option? An internal letter sent to CVE board members was making the rounds yesterday warning the current contract ("contracting pathway") would expire. The letter was authenticated by Brian Krebs[0]. Once Krebs authenticated the letter, people more or less assumed CISA was pulling funding, at least based on the infosec social media posts I saw. CISA…
Comment linking /2025/04/funding-expires-for-key-cyber-vulnerability-database/
on “CVE program faces swift end after DHS fails to renew contract [updated]”Submitted Facebook Stored Hundreds of Millions of User Passwords in Plain Text for Years as a story · 1252 points
HN discussionZoom's problems aren't really a matter of having security talent , they're a matter of the company as a whole not prioritizing security. Fixing the former doesn't fix the problem, it just makes for good PR. The latter is a requirement for the former. Brian Krebs talked about this a bit in the wake of Equifax: https://krebsonsecurity.com/2018/12/a-chief-security-concern... Assuming Zoom is really trying to fix the pr…
Comment linking /2018/12/a-chief-security-concern-for-executive-teams/
on “Zoom Acquires Keybase”Submitted How each pillar of the First Amendment is under attack as a story · 1176 points
HN discussionPerhaps they leased a botnet. https://krebsonsecurity.com/2025/10/aisuru-botnet-shifts-fro...
Comment linking /2025/10/aisuru-botnet-shifts-from-ddos-to-residential-proxies/
on “Backing up Spotify”Submitted 30k U.S. organizations newly hacked via holes in Microsoft Exchange Server as a story · 1038 points
HN discussion> I had non-technical family members bragging at Thanksgiving about how they bought at box at their local Best Buy that has an app which plays any movie or TV show they want on demand without paying anything. They didn’t understand what was happening, but they said it worked great. Sounds like one of these: https://krebsonsecurity.com/2025/11/is-your-android-tv-strea... Probably not your problem to play tech support…
Comment linking /2025/11/is-your-android-tv-streaming-box-part-of-a-botnet/
on “Backing up Spotify”Submitted DOGE worker’s code supports NLRB whistleblower as a story · 1013 points
HN discussionDeeper analysis from Brian Krebs: https://krebsonsecurity.com/2018/09/facebook-security-bug-af...
Comment linking /2018/09/facebook-security-bug-affects-90m-users/
on “Facebook Network Breach Impacts Up to 50M Users”Submitted Mastercard DNS error went unnoticed for years as a story · 1007 points
HN discussionThis is bullshit. "The Com" is computer hacking like carding, Kerbs puts them as distinct "crime-focused chat communities" as others have posted - https://krebsonsecurity.com/2024/09/the-dark-nexus-between-h... Kerbs had to go to effort to find overlap between the harm groups and "The Com" There are groups that attack children and there are groups that attack these groups in "The Com", if you define "The Com" at a h…
Comment linking /2024/09/the-dark-nexus-between-harm-groups-and-the-com/
on “Teen on Musk's DOGE team graduated from 'The Com'”Submitted Who’s behind the “reopen” domain surge? as a story · 988 points
HN discussionMaybe we should investigate government employees for ties to child predator networks whether or not we're just a "cesspool of careerists," bro. https://www.wired.com/story/764-com-child-predator-network/ https://krebsonsecurity.com/2024/09/the-dark-nexus-between-h...
Comment linking /2024/09/the-dark-nexus-between-harm-groups-and-the-com/
on “Teen on Musk's DOGE team graduated from 'The Com'”Submitted Pay up or we’ll make Google ban your ads as a story · 831 points
HN discussionKrebs has written other articles about it: https://krebsonsecurity.com/2024/09/the-dark-nexus-between-h...
Comment linking /2024/09/the-dark-nexus-between-harm-groups-and-the-com/
on “Teen on Musk's DOGE team graduated from 'The Com'”Submitted Whistleblower: DOGE Siphoned NLRB Case Data as a story · 818 points
HN discussion> There’s an HVAC company like this also, I’ll bet. IIRC a hacked HVAC vendor was how credit card skimming software was infiltrated into Target and credit card data was exfiltrated a decade or so ago. Edit, source: https://krebsonsecurity.com/2014/02/target-hackers-broke-in-...
Comment linking /2014/02/target-hackers-broke-in-via-hvac-company/
on “Mark Klein, AT&T whistleblower who revealed NSA mass spying, has died”Submitted DarkSide ransomware gang quits after servers, Bitcoin stash seized as a story · 787 points
HN discussionJournalist and security researcher Brian Krebs believes this is someone doing a DDoS as payback for research into questionable "DDoS mitigation services" that he and Dyn's Doug Madory did. Doug just presented his results yesterday at NANOG and Krebs believes this is payback. Read more: https://krebsonsecurity.com/2016/10/ddos-on-dyn-impacts-twit...
Comment linking /2016/10/ddos-on-dyn-impacts-twitter-spotify-reddit/
on “DDoS Attack Against Dyn Managed DNS”Submitted Google: Security Keys Neutralized Employee Phishing as a story · 775 points
HN discussionvia [1]: "Dyn says today's DDoS are in part being caused by Mirai botnet, which recently caused record-sized attack [2]" [1] https://twitter.com/AlexJamesFitz/status/789562789920636928 [2] https://krebsonsecurity.com/2016/10/source-code-for-iot-botn... tl;dr: a substantial part of this attack is a botnet of IoT devices.
Comment linking /2016/10/source-code-for-iot-botnet-mirai-released/
on “DDoS Attack Against Dyn Managed DNS”Submitted Who’s behind Wednesday’s epic Twitter hack? as a story · 746 points
HN discussionKrebs writes articles based on tips [0] of this nature all the time. As a reporter I expect he would appreciate the opportunity to break the story. [0] https://krebsonsecurity.com/about-this-blog/
Comment linking /about-this-blog/
on “What Happens When You Send a Zero-Day to a Bank?”Submitted When in doubt: hang up, look up, and call back as a story · 734 points
HN discussionThis is another case where it's highly important to "plant your flag" [1] and set up all those services like Search Console, even if you don't plan to use them. Not only can this sort of thing happen, but bad-guys can find crafty ways of hijacking your search console account if you're not super vigilant. Google Postmaster Console [2] is another one everybody should set up on every domain, even if you don't use gmail…
Comment linking /2020/08/why-where-you-should-you-plant-your-flag/
on “Google flags Immich sites as dangerous”Submitted US Secret Service: “Massive Fraud” Against State Unemployment Insurance Programs as a story · 676 points
HN discussion
