Author: HackWatchit

Malicious apps with +19M installs removed from Google Play because spreading Anatsa banking trojan and other malware Pierluigi Paganini August 25, 2025 Experts found 77 malicious Android apps with 19M+ installs on Google Play, spreading malware, including the Anatsa (TeaBot) banking trojan. While investigating Anatsa (Tea Bot) banking trojan infections, Zscaler’s ThreatLabs discovered seventy-seven malicious Android apps with more than 19 million installs. Several Anatsa decoy apps have each been downloaded more than 50,000 times. The malicious apps were delivering multiple malware families to Google Play users. “Alongside Anatsa, ThreatLabz identified and reported 77 malicious apps from various malware families to Google,…

We’re standing at the threshold of a new era in cybersecurity threats. While most consumers are still getting familiar with ChatGPT and basic AI chatbots, cybercriminals are already moving to the next frontier: Agentic AI. Unlike the AI tools you may have tried that simply respond to your questions, these new systems can think, plan, and act independently, making them the perfect digital accomplices for sophisticated scammers. The next evolution of cybercrime is here, and it’s learning to think for itself. The threat is already here and growing rapidly. According to McAfee’s latest State of the Scamiverse report, the average…

Cloudflare announced new capabilities for Cloudflare One, its zero trust platform, designed to help organizations securely adopt, build and deploy emerging generative AI applications. With these new features, Cloudflare is giving customers the ability to automatically understand, analyze and set controls on how generative AI is used throughout their organization, enhancing the productivity and innovation of their teams without sacrificing security or privacy standards. Across every team – from finance and marketing to engineering and design – companies are using generative AI to work faster, streamline daily tasks, and create powerful new applications. However, this widespread adoption is frequently occurring…

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has released draft guidance, ‘2025 Minimum Elements for a Software Bill of Materials (SBOM),’ for public comment. The 2025 SBOM Minimum Elements document updates CISA’s earlier guidance to account for advances in SBOM tooling and the growing maturity of SBOM adoption. It also incorporates lessons learned from increased generation and use of SBOMs and establishes an updated baseline for how software component information should be documented and shared.  Members of the public can submit comments on the draft guidance beginning Friday. CISA is seeking feedback on the proposed clarifications and enhancements, with…

We live in an era where your next big idea could come from an employee working out of a cafe in Tokyo or on the beach in Bali. The digital nomad lifestyle has become more than a trend—it has transformed how we work. The onset of remote work offers exciting opportunities for CEOs and CIOs. However, this also creates some daunting challenges, particularly in cybersecurity. As leaders learn to balance flexibility with security, implementing an IT Asset Management (ITAM) solution has become crucial for managing a company’s technology assets, regardless of where employees work. The Rising Stakes of Cybersecurity Despite…

Hear More Directly From Researchers and Consultants You may have noticed a new type of article on the Unit 42 site, with a different sort of headline and a different style of writing. These are part of a section we’re calling “Insights.” It’s designed to put you more directly in touch with Unit 42 researchers and consultants, so you can read unvarnished thoughts on the threat landscape and what we’re seeing in real-world incident response cases. How Are Insights Different? I started working on Unit 42 threat research publications in 2020 and I am incredibly proud of the threat research…

A report published today by Wallarm finds that of the 639 Common Vulnerabilities and Exposures (CVEs) pertaining to application programming interfaces (APIs) reported in Q2 2025, 34 involved issues relating to some type of use case tied to artificial intelligence (AI). Overall, two-thirds of the API CVEs represent either critical or high severity threats, according.. The post Report Surfaces Increased Number of API Security Issues Involving AI appeared first on Security Boulevard.

Seventy-seven malicious Android apps with more than 19 million installs were delivering multiple malware families to Google Play users. This malware infiltration was discovered by Zscaler’s ThreatLabs team while investigating a new infection wave with Anatsa (Tea Bot) banking trojan targeting Android devices. While most of the malicious apps (over 66%) included adware components, the most common Android malware was Joker, which researchers encountered in almost 25% of the analyzed apps. Once Joker malware is installed on a device, it can read and send text messages, take screenshots, make phone calls, and steal contact lists, access device information, and subscribe users to…

As government agencies face growing pressure to secure complex, hybrid environments, Cisco remains committed to our mission to serve as a trusted security partner. Over the past year, we’ve reinforced our dedication to the U.S. public sector by delivering modern security solutions tailored to the unique needs of federal, state, and local agencies. Today we’re proud to announce a significant milestone in our journey—three new FedRAMP-authorized cloud security solutions purpose-built for federal, state, and local agencies: Cisco Secure Access for Government Cisco Security Cloud Control for Government Cisco Multicloud Defense for Government Security that meets the network, and the mission…