Tech News

Oct 14, 2026

New Android Trojan Hirudo Exploits Banking Apps for Financial Fraud

• Malware
• Threat intelligence
• Vulnerabilities

A new Android banking Trojan, named Hirudo, has been discovered by cybersecurity experts, raising alarms about its sophisticated method of operation. This malware targets legitimate banking applications by replacing them with modified versions that have been engineered to circumvent the security measures embedded within these apps. This tactic represents a significant advancement in the methods employed by cybercriminals to commit financial fraud.

The threat was identified by ThreatFabric, a Dutch mobile security firm, which reported that Hirudo has successfully created patched versions of eight different banking applications in Indonesia. This means that users of these banks may unknowingly download a malicious version of their banking app, leaving them vulnerable to theft and fraud without any visible signs of compromise.

The implications of this development are concerning, particularly for users who rely on mobile banking. With the rise of digital banking, many individuals may not be aware of the potential risks associated with downloading apps from unofficial sources or failing to verify the authenticity of updates. As Hirudo employs tactics that blend seamlessly with legitimate applications, it complicates the detection and prevention of such threats.

This incident highlights the urgent need for enhanced security measures within banking applications, as well as greater awareness among users regarding the importance of safeguarding their devices. Cybersecurity experts recommend that individuals remain vigilant and consider implementing additional security protocols, such as two-factor authentication and regular app updates from trusted sources, to mitigate the risks associated with such malware.

As the landscape of cyber threats continues to evolve, the emergence of Hirudo signifies a notable shift towards more sophisticated attacks that exploit the very systems designed to protect users. Financial institutions and mobile security companies must collaborate closely to address these vulnerabilities and develop more robust defenses against emerging threats.

Oct 14, 2026

AI Agents Arrive in a Government Cloud Security Platform

• Vulnerabilities
• Enterprise
• Threat intelligence

A cloud security vendor has added AI agents to the government edition of its platform. The feature sits on a cloud-native application protection platform and is meant to give public-sector teams a faster first pass over findings. The agents handle routine analysis, rank threats with current data, and shorten the gap between a signal and a response.

Public-sector teams work under constraints that many commercial programs do not: long procurement cycles, strict rules on where data may sit, and infrastructure that is a frequent target. Automating that first pass is aimed at those constraints. The same workflow used on a commercial cloud account is being offered inside environments built for government use.

Teams that enable the agents should spend less time on repetitive triage and more time on the cases that need a person. Faster tooling does not remove the need to confirm a high-impact action. It moves that confirmation earlier. The practical test is whether the recommendation can be audited and whether the agent stays inside the government environment's boundary.

Shipping automation as a default, rather than an add-on, is now a common pattern in cloud defense products. For an agency, those two checks — auditability and data boundary — decide whether the feature is something operators can run, or only something they can watch in a demonstration.