Cybersecurity researchers have disclosed details of a new Android banking trojan called Hirudo that works by replacing legitimate banking apps with purpose-built patched versions designed to bypass security checks from inside the app itself, marking a new escalation in financial fraud.  Dutch mobile security company ThreatFabric said it identified replacements for eight Indonesian banking

#infosec #threatintel #banking #security #android #apps #bypass

The bug was simple: the login let you choose where your sign-in code went. Proving it on a live website was the hard part. TL;DR During an authorized assessment, an AI pentesting agent found a critical authentication bypass on a major insurer's production website, on its own. One login request let the user choose where the one-time passcode went. The attack was the easy part. Proving it

#infosec #threatintel #part #agent #attack #bypass #critical

Are podcasts remaking politics or just bypassing scrutiny?

#news #world #middleeast #podcasts #became #political #powerhouses #bypassing