KrebsOnSecurity

KrebsOnSecurity is a cybersecurity news website that focuses on delivering investigative reporting and analysis of online threats, data breaches, and cybercrime activities. The site publishes articles that often combine original research with information obtained from law enforcement, security researchers, and underground sources. Its audience includes information security professionals, journalists, corporate security teams, and anyone interested in the technical and societal dimensions of digital threats. By providing timely and detailed coverage, KrebsOnSecurity helps readers understand emerging attack techniques and defensive measures.

The organization is headquartered in the United States, although its readership is global. KrebsOnSecurity has attracted attention not only for its editorial content but also for being a target of large‑scale distributed denial‑of‑service attacks. In September 2021 the site was hit by a Meris botnet assault that generated over two million requests per second, surpassing a previous Mirai‑based attack on the same property by more than fourfold. Earlier, in September 2016 the site endured a sustained DDoS episode exceeding 140 gigabits per second, illustrating the visibility that makes it a notable target for adversarial traffic.

A distinguishing attribute of KrebsOnSecurity is its specialization in deep investigative journalism that often uncovers the inner workings of cybercriminal enterprises and the infrastructure behind botnets, malware campaigns, and fraud schemes. The site’s reporting is frequently cited by other media outlets, security vendors, and government agencies as a primary source of technical detail and contextual insight. Its competencies include the ability to reverse‑engineer malicious code, trace command‑and‑control servers, and correlate disparate data points to reveal broader threat landscapes. This focus on original, evidence‑based reporting sets it apart from more general news outlets that rely on secondary summaries.

Ownership of KrebsOnSecurity rests with its founder, Brian Krebs, who operates the site as an independent venture; no public information indicates a parent company or subsidiary structure. The site’s operational model relies on advertising, sponsorships, and reader support rather than traditional media conglomerate backing. As a result, it maintains editorial independence while continuing to produce the focused cybersecurity coverage that has become its hallmark.