Malwarebytes
The Security Blog From Malwarebytes
- Posts
- 3,316 from 4 Nov 2020 to 30 Oct 2026
- Posting
- about daily (727 in the last year)
- Kind
- company blog
- Feed
- https://www.malwarebytes.com/blog/feed/index.xml
Latest
October 2026
- Fake PDF and search tools hijacked searches for 13.4 million Chrome users
- Photo ID, bank checks, face scan? The UK’s age-check options
- Binance hit by largest-ever crypto theft, with $6.3 billion stolen
- Hackers steal and publish data on 41,000 Homeland Security workers
- Malicious Firefox extensions impersonate popular crypto wallets
- Have an older iPhone or iPad? Apple has a security update for you
- Banks are blocking AI agents from customer accounts
- Chrome and Firefox updates fix serious security flaws. Install them now
- Five election scams to watch out for
- Artificial Intimacy: Love and lies in the age of AI
- The web’s having a rough week. Here’s how to browse safely
- Samsung TVs without mics may listen through soundbars, researcher says
- Popcorn Time’s forgotten updater left millions of devices exposed to hijacking
- AI Halloween videos: Who’s getting your photos?
- Patient records exposed in Quest breach: What you need to know
- A week in security (October 19 – October 25)
- Resident Evil maker Capcom warns of phishing after 11.7 million records exposed
- Crime Stoppers chapter freezes tips after breach breaks anonymity promise
- Facebook’s misleading privacy claims land Meta a $25 billion penalty
- Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
- Woman faces years in prison over a Cash App account she says she never opened
- Delivery bots accused of illegally scanning customers
- WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
- PHP2Shell: Why many websites had to go offline
- Fake Amazon Music x YouTube deal lures creators into a Google login trap
- Signal bug could let someone keep listening after you hang up
- Google may add your number to all your accounts: How to stop it
- Meta glasses caught recording conversations without wake phrase
- Man seeking love travels 2,000 km to meet an AI-generated woman
- AOMEI Backupper update servers hijacked to push malware: Check your PC
- A sextortion conspiracy killed his son (Lock and Code S07E21)
- Millions of California students’ sensitive data stolen in breach
- A week in security (October 12 – October 18)
- Eiliko robot companion exposes private chats and can be hijacked
- “Spray and pray” job applications could make it harder for you to spot a scam
- OpenAI sued over children safety and data use
- Update Chrome: Google fixes 37 security flaws, including seven critical bugs
- Is this link safe? Find out with Malwarebytes Scam Link Check
- Sextortion “help” firm took $60 million from victims, FTC alleges
- Raven AI lets cops find your home from a photo taken inside
- AI worms could spread across your smart devices, Anthropic warns
- Update Windows: Record Patch Tuesday fixes flaw already under attack
- Fake Calendly “Meta Careers” pages steal Facebook and Google logins
- Police receive fake murder tip from Anthropic’s Claude AI
- Grindr users’ sensitive data shared through ad auctions without valid consent
- Hackers heat up supermarket fridges, spoiling food across France
- Scammers know your name, and they’re counting on you to reply
- How “123456” became the key to almost 9 million personal records
- Phishing emails are baiting your AI assistant
- A week in security (October 5 – October 11)
- ASOS breach update: Hackers stole customer details and shopping searches
- Attackers hijack country-code domains to impersonate Google and other services
- Amazon has an uncomfortably personal profile on you
- Meta’s Muse AI files away your friendships, arguments, and secrets
- Google issues Android security updates: who can get them and how
- AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
- Update Chrome and ChromeOS to fix critical security issues
- Another ShinyHunters suspect arrested
- ASOS “hackers” send push notifications to customers
- Facebook Marketplace scam uses your name and number
- Domino’s customers targeted in credential stuffing attacks
- Google pauses open source bug bounty program after rise in AI submissions
- Proposed anti-Flock bills could spell trouble for license plate readers
- A week in security (September 28 – October 4)
- Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
- Shadow AI explained: The work shortcut that could leak your company’s secrets
- Convincing Free Mobile phishing emails appear after data breach
- Malwarebytes earns another Top Product award in independent testing
- Pentagon breach exposes Social Security numbers and military records of millions
- Losing gamblers pushed to bet more by DraftKings’ AI, report says
September 2026
- Hackers steal protective order and foster care records from Arizona courts
- Your car’s app could be telling Big Tech who you are and where you go
- Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home
- Update your iPhone, iPad, or Mac: Flaw could run attackers’ code
- Fake iPhone Duo preorder scam triggers DarkSword attack
- Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
- OpenAI pauses work on top AI models after agent slips past internet controls
- FBI agents’ blood tests and doctors’ notes surface after breach
- A week in security (September 21 – September 27)
- LinkedIn adds new checks for fake profiles and work histories
- Kothamine malware uses Tailscale’s tailcat to evade network detection
- Criminals turn placeholder domain into ClickFix trap
- That shipping rebate offer may come with a monthly charge
- OpenAI agent breached Australian government site, took months to report it
- New Browser Guard features add protection before and after you click
- Update Chrome: 108 security fixes for desktop, new release for Android
- Google’s location data privacy failures draw a €403 million fine
- How device code phishing gives scammers access to your account
- Fake Claude Max giveaway hides a Google account phishing trap
- ShinyHunters claims FBI breach was revenge for “false” report
- Some cheap smart glasses are a security disaster
- Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
- Researchers used Claude to hack OpenAI
- The AI plot to scan and destroy books (Lock and Code S07E19)
- The fake sites using a cheap toolkit to sell $2,000 AI subscriptions
- Gemini’s breach of real companies exposes an AI guardrail problem
- ShinyHunters hacks rival extortion gang and takes over its dark web site
- A week in security (September 14 – September 20)
- New Android malware uses AI to steal bank logins and PINs
- Did an AI really try to break free from human control?
- Fake parcel delivery messages steal your card and bank details
- Flock cameras are tracking people as well as cars
- Revolut phishing texts appear days after data breach
- 12 celebrity deepfake websites seized by Manhattan DA
- T-Mobile rewards points expiry texts are a phishing scam
- Google Pixel owners urged to patch actively exploited modem flaw
- AI helps scammers build convincing antivirus renewal pages
- How to opt out of AI chatbot training
- HBO Max’s verified Reddit account hijacked to spread malware
- Meta AI builds detailed profiles of children from years of family posts
- Search results are sending people to fake Bitrefill checkouts
- Google’s new search redirects make links harder to check before you click
- Revolut gave customer IDs and financial data to a government impostor
- A week in security (September 7 – September 13)
- Crypto customers targeted by scammers after email marketing provider breach
- Android malware creates a hidden copy of your banking app
- BlueMoon exploit kit turns Chrome and Windows flaws into attacks
- Will AI kill us all within the next decade?
- Update Chrome now to protect against an actively exploited vulnerability
- Copyright scammers get Instagram accounts suspended and demand payment
- More than 100,000 fake stores are out to steal your card details
- Microsoft fixes record 964 flaws, including 2 exploited zero-days
- The push to stop algorithms controlling social media feeds has begun
- Grindr settles HIV status data-sharing lawsuit for $35 million
- MikroTik router flaws allow takeover without a password
- Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)
- LG TV flaws could let attackers listen in, even in standby mode
- Flirty OnlyFans promoters on X may be using AI to appear human
- A week in security (August 31 – September 6)
- The hidden work of modernizing Malwarebytes
- X Money rollout linked to password-reset attacks
- Free streaming boxes may be routing criminal traffic through your home
- StreamRat Android malware spreads through Meta and TikTok ads
- Your phone or computer may soon ask how old you are
- Tech support scams look different now. Here’s what to watch for
- Scammers are getting smarter about where they target you
- Two critical Chrome flaws put users at risk on malicious websites
- 153M+ driver’s licenses for sale on new dark web platform
- Your AI chats could be used in court
- Fake GTA 6 leaked copy drains your crypto wallet
- TerminalFix looks like ClickFix, but delivers a very different payload
- Infostealers are hijacking Claude accounts at users’ expense
August 2026
- McKesson confirms cyber incident after ShinyHunters claims patient-data theft
- A week in security (August 24 – August 30)
- Protect your WhatsApp account with new passkey and 2FA upgrades
- The AI agent swarm that attacked Hugging Face is a warning for the future
- Flock wants privacy to meet surveillance halfway
- Fake listings can turn trusted platforms into scam springboards
- Fake Apple Pay charge brings the classic tech support scam to your phone
- New Instagram and Facebook rules set a default two-hour limit for teens