This is an unwelcome development: New research shows Android-based malware droppers aren't just delivering banking trojans anymore: They're also being loaded with SMS stealers and spyware.

Dutch mobile security firm ThreatFabric finds the shift comes amid changes Google is piloting in certain markets like Thailand, Singapore, Brazil and India to block sideloading of suspicious apps requesting dangerous permissions.

The report says the other factor driving this trend is that threat actors want to future-proof their operations. "By encapsulating even basic payloads inside a dropper, they gain a protective shell that can evade today’s checks while staying flexible enough to swap payloads and pivot campaigns tomorrow."

https://www.threatfabric.com/blogs/android-droppers-the-silent-gatekeepers-of-malware

@campuscodi

https://www.helpnetsecurity.com/2025/09/02/zscaler-palo-alto-networks-spycloud-among-the-affected-by-salesloft-breach/

AI browsers can’t tell legitimate websites from malicious ones — here’s why that’s putting you at risk
https://www.tomsguide.com/computing/online-security/ai-browsers-cant-tell-legitimate-websites-from-malicious-ones-heres-why-thats-putting-you-at-risk?utm_source=flipboard&utm_medium=activitypub

Posted into Cybersecurity Today @cybersecurity-today-rhudaur

How America’s AI boom is squeezing the rest of the economy
https://www.economist.com/finance-and-economics/2025/08/18/how-americas-ai-boom-is-squeezing-the-rest-of-the-economy?utm_source=flipboard&utm_medium=activitypub

Posted into The AI Hype @the-ai-hype-rhudaur

Microsoft openly admitting they have not(!) had MFA, network segmentation, least privilege, software lifecycle, jump-servers, asset- and software-inventory etc for Azure PROD for years and they are not there yet.

This whole report is just so scary. At the same time, good that they are finally working on it and making it transparent.

Source: https://cdn-dynmedia-1.microsoft.com/is/content/microsoftcorp/microsoft/final/en-us/microsoft-brand/documents/sfi-april-2025-progress-report.pdf

#Microsoft #azure #infosec