Crocodilus and The IT Privacy and Security Weekly Update for the Week Ending April 22nd., 2025

EP 239. This week:
Emerging Android malware “Crocodilus” is targeting crypto wallet users in Spain and Turkey with deceptive apps that hijack seed phrases and device access through sophisticated accessibility exploits.
ChatGPT’s new models are impressively accurate at identifying real-world locations from images, sparking both admiration for AI capabilities and concern over potential misuse.
A new study reveals that 50% of employees secretly use unauthorized generative AI tools, highlighting the urgent need for smarter, sanctioned workplace solutions.
The EU has banned AI agents in official virtual meetings, citing privacy and transparency concerns in line with its broader push for responsible AI use.
Researchers have exposed critical NFC flaws that allow attackers to manipulate ATMs and payment terminals using only a smartphone, raising alarms about contactless payment security.
Dutch research shows ransomware actors hike demands—up to 5.5x—when they discover cyber-insurance documents on victims’ systems, underscoring the importance of discreet data handling.
With U.S. border agents empowered to inspect devices without a warrant, travelers are advised to minimize data exposure and take proactive digital hygiene steps to safeguard personal information.
Let's go discover this week's update.... just be careful where you step!

Find the full transcript to this podcast here.