New Android malware relays bank cards to fraudsters while victims still hold them

The feed reports a new Android malware operation involving WindRelay, which captures live payment-card data over NFC and relays it to fraudsters in real time while the victim still possesses the card. WindRelay is used alongside the SpyNote Android remote-access trojan, with social engineering calls impersonating banks initiating the attack. Other items cover cloud IAM misconfiguration, fraud call-center disruption, cybersecurity regulation, and AI governance, but no specific vulnerability disclosures are identified.