DoJ seized $2.8M in crypto from Ianis Antropenko, indicted in Texas and tied to the defunct Zeppelin ransomware. The U.S. Department of Justice (DoJ) seized more than $2.8 million in cryptocurrency from Ianis Aleksandrovich Antropenko. Antropenko was allegedly involved in now…
Category: EN
Evolution of the PipeMagic backdoor: from the RansomExx incident to CVE-2025-29824
We examine the evolution of the PipeMagic backdoor and the TTPs of its operators – from the RansomExx incident in 2022 to attacks in Brazil and Saudi Arabia, and the exploitation of CVE-2025-29824 in 2025. This article has been indexed…
Workday Reveals CRM Breach
Workday has revealed a breach of its third-party CRM systems in what could be the latest ShinyHunters attack This article has been indexed from www.infosecurity-magazine.com Read the original article: Workday Reveals CRM Breach
Scammers Target Back-to-School Deals, Diverting Shoppers to Fraud Sites
As the back-to-school season intensifies, cybercriminals are exploiting the heightened online shopping activity by deploying sophisticated scams aimed at siphoning funds and personal data from unsuspecting consumers. According to retail analytics, U.S. households allocate approximately $860 per child on essentials…
The tablet that made me ditch my Kindle and iPad now has a worthy follow-up
The TCL Nxtpaper 11 Plus is a balanced Android tablet that delivers a solid everyday experience for a competitive price. This article has been indexed from Latest news Read the original article: The tablet that made me ditch my Kindle…
I love my Samsung Z Fold 7, but these Google Pixel upgrades would win me over
The Pixel 10 Pro Fold’s biggest challenge might come down to timing. This article has been indexed from Latest news Read the original article: I love my Samsung Z Fold 7, but these Google Pixel upgrades would win me over
How to spot wrong number phone scams
Have you ever gotten a text from an unknown number that seems like a simple mistake, like “Hey, is this Sarah?” or “Are we still… The post How to spot wrong number phone scams appeared first on Panda Security Mediacenter.…
Xerox fixed path traversal and XXE bugs in FreeFlow Core
Xerox patched two serious flaws in FreeFlow Core, path traversal and XXE injection, that allowed unauthenticated remote code execution. Xerox addressed two serious flaws, respectively tracked as CVE-2025-8355 and CVE-2025-8356, in FreeFlow Core. The vulnerabilities are a path traversal (CVE-2025-8355)…
Hundreds of TeslaMate Servers Expose Real-Time Vehicle Data
A security researcher has discovered that hundreds of self-hosted TeslaMate servers are exposing sensitive Tesla vehicle data to the public internet without any authentication, revealing real-time location tracking, charging patterns, and driving habits of unsuspecting owners. TeslaMate is a popular…
Threat Actor Allegedly Claiming Access to 15.8 Million PayPal Email and Passwords in Plaintext
A threat actor operating under the alias “Chucky_BF” has posted a concerning advertisement on a well-known cybercrime forum, claiming to possess and sell a “Global PayPal Credential Dump 2025” containing over 15.8 million email and plaintext password pairs. The dataset,…