The Curious Engineer

Malwarebytes

2025–2026

1,160 posts

← 2023–2024

2026 626

October 2026

  1. Fake PDF and search tools hijacked searches for 13.4 million Chrome users
  2. Photo ID, bank checks, face scan? The UK’s age-check options
  3. Binance hit by largest-ever crypto theft, with $6.3 billion stolen
  4. Hackers steal and publish data on 41,000 Homeland Security workers
  5. Malicious Firefox extensions impersonate popular crypto wallets
  6. Have an older iPhone or iPad? Apple has a security update for you
  7. Banks are blocking AI agents from customer accounts
  8. Chrome and Firefox updates fix serious security flaws. Install them now
  9. Five election scams to watch out for
  10. Artificial Intimacy: Love and lies in the age of AI
  11. The web’s having a rough week. Here’s how to browse safely
  12. Samsung TVs without mics may listen through soundbars, researcher says
  13. Popcorn Time’s forgotten updater left millions of devices exposed to hijacking
  14. AI Halloween videos: Who’s getting your photos?
  15. Patient records exposed in Quest breach: What you need to know
  16. A week in security (October 19 – October 25)
  17. Resident Evil maker Capcom warns of phishing after 11.7 million records exposed
  18. Crime Stoppers chapter freezes tips after breach breaks anonymity promise
  19. Facebook’s misleading privacy claims land Meta a $25 billion penalty
  20. Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
  21. Woman faces years in prison over a Cash App account she says she never opened
  22. Delivery bots accused of illegally scanning customers
  23. WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
  24. PHP2Shell: Why many websites had to go offline
  25. Fake Amazon Music x YouTube deal lures creators into a Google login trap
  26. Signal bug could let someone keep listening after you hang up
  27. Google may add your number to all your accounts: How to stop it
  28. Meta glasses caught recording conversations without wake phrase
  29. Man seeking love travels 2,000 km to meet an AI-generated woman
  30. AOMEI Backupper update servers hijacked to push malware: Check your PC
  31. A sextortion conspiracy killed his son (Lock and Code S07E21)
  32. Millions of California students’ sensitive data stolen in breach
  33. A week in security (October 12 – October 18)
  34. Eiliko robot companion exposes private chats and can be hijacked
  35. “Spray and pray” job applications could make it harder for you to spot a scam
  36. OpenAI sued over children safety and data use
  37. Update Chrome: Google fixes 37 security flaws, including seven critical bugs
  38. Is this link safe? Find out with Malwarebytes Scam Link Check
  39. Sextortion “help” firm took $60 million from victims, FTC alleges
  40. Raven AI lets cops find your home from a photo taken inside
  41. AI worms could spread across your smart devices, Anthropic warns
  42. Update Windows: Record Patch Tuesday fixes flaw already under attack
  43. Fake Calendly “Meta Careers” pages steal Facebook and Google logins
  44. Police receive fake murder tip from Anthropic’s Claude AI
  45. Grindr users’ sensitive data shared through ad auctions without valid consent
  46. Hackers heat up supermarket fridges, spoiling food across France
  47. Scammers know your name, and they’re counting on you to reply
  48. How “123456” became the key to almost 9 million personal records
  49. Phishing emails are baiting your AI assistant
  50. A week in security (October 5 – October 11)
  51. ASOS breach update: Hackers stole customer details and shopping searches
  52. Attackers hijack country-code domains to impersonate Google and other services
  53. Amazon has an uncomfortably personal profile on you
  54. Meta’s Muse AI files away your friendships, arguments, and secrets
  55. Google issues Android security updates: who can get them and how
  56. AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
  57. Update Chrome and ChromeOS to fix critical security issues
  58. Another ShinyHunters suspect arrested
  59. ASOS “hackers” send push notifications to customers
  60. Facebook Marketplace scam uses your name and number
  61. Domino’s customers targeted in credential stuffing attacks
  62. Google pauses open source bug bounty program after rise in AI submissions
  63. Proposed anti-Flock bills could spell trouble for license plate readers
  64. A week in security (September 28 – October 4)
  65. Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
  66. Shadow AI explained: The work shortcut that could leak your company’s secrets
  67. Convincing Free Mobile phishing emails appear after data breach
  68. Malwarebytes earns another Top Product award in independent testing
  69. Pentagon breach exposes Social Security numbers and military records of millions
  70. Losing gamblers pushed to bet more by DraftKings’ AI, report says

September 2026

  1. Hackers steal protective order and foster care records from Arizona courts
  2. Your car’s app could be telling Big Tech who you are and where you go
  3. Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home
  4. Update your iPhone, iPad, or Mac: Flaw could run attackers’ code
  5. Fake iPhone Duo preorder scam triggers DarkSword attack
  6. Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
  7. OpenAI pauses work on top AI models after agent slips past internet controls
  8. FBI agents’ blood tests and doctors’ notes surface after breach
  9. A week in security (September 21 – September 27)
  10. LinkedIn adds new checks for fake profiles and work histories
  11. Kothamine malware uses Tailscale’s tailcat to evade network detection
  12. Criminals turn placeholder domain into ClickFix trap
  13. That shipping rebate offer may come with a monthly charge
  14. OpenAI agent breached Australian government site, took months to report it
  15. New Browser Guard features add protection before and after you click
  16. Update Chrome: 108 security fixes for desktop, new release for Android
  17. Google’s location data privacy failures draw a €403 million fine
  18. How device code phishing gives scammers access to your account
  19. Fake Claude Max giveaway hides a Google account phishing trap
  20. ShinyHunters claims FBI breach was revenge for “false” report
  21. Some cheap smart glasses are a security disaster
  22. Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor
  23. Researchers used Claude to hack OpenAI
  24. The AI plot to scan and destroy books (Lock and Code S07E19)
  25. The fake sites using a cheap toolkit to sell $2,000 AI subscriptions
  26. Gemini’s breach of real companies exposes an AI guardrail problem
  27. ShinyHunters hacks rival extortion gang and takes over its dark web site
  28. A week in security (September 14 – September 20)
  29. New Android malware uses AI to steal bank logins and PINs
  30. Did an AI really try to break free from human control?
  31. Fake parcel delivery messages steal your card and bank details
  32. Flock cameras are tracking people as well as cars
  33. Revolut phishing texts appear days after data breach
  34. 12 celebrity deepfake websites seized by Manhattan DA
  35. T-Mobile rewards points expiry texts are a phishing scam
  36. Google Pixel owners urged to patch actively exploited modem flaw
  37. AI helps scammers build convincing antivirus renewal pages
  38. How to opt out of AI chatbot training
  39. HBO Max’s verified Reddit account hijacked to spread malware
  40. Meta AI builds detailed profiles of children from years of family posts
  41. Search results are sending people to fake Bitrefill checkouts
  42. Google’s new search redirects make links harder to check before you click
  43. Revolut gave customer IDs and financial data to a government impostor
  44. A week in security (September 7 – September 13)
  45. Crypto customers targeted by scammers after email marketing provider breach
  46. Android malware creates a hidden copy of your banking app
  47. BlueMoon exploit kit turns Chrome and Windows flaws into attacks
  48. Will AI kill us all within the next decade?
  49. Update Chrome now to protect against an actively exploited vulnerability
  50. Copyright scammers get Instagram accounts suspended and demand payment
  51. More than 100,000 fake stores are out to steal your card details
  52. Microsoft fixes record 964 flaws, including 2 exploited zero-days
  53. The push to stop algorithms controlling social media feeds has begun
  54. Grindr settles HIV status data-sharing lawsuit for $35 million
  55. MikroTik router flaws allow takeover without a password
  56. Loyalty points fraud is funding hacker holidays (Lock and Code S07E18)
  57. LG TV flaws could let attackers listen in, even in standby mode
  58. Flirty OnlyFans promoters on X may be using AI to appear human
  59. A week in security (August 31 – September 6)
  60. The hidden work of modernizing Malwarebytes
  61. X Money rollout linked to password-reset attacks
  62. Free streaming boxes may be routing criminal traffic through your home
  63. StreamRat Android malware spreads through Meta and TikTok ads
  64. Your phone or computer may soon ask how old you are
  65. Tech support scams look different now. Here’s what to watch for
  66. Scammers are getting smarter about where they target you
  67. Two critical Chrome flaws put users at risk on malicious websites
  68. 153M+ driver’s licenses for sale on new dark web platform
  69. Your AI chats could be used in court
  70. Fake GTA 6 leaked copy drains your crypto wallet
  71. TerminalFix looks like ClickFix, but delivers a very different payload
  72. Infostealers are hijacking Claude accounts at users’ expense

August 2026

  1. McKesson confirms cyber incident after ShinyHunters claims patient-data theft
  2. A week in security (August 24 – August 30)
  3. Protect your WhatsApp account with new passkey and 2FA upgrades
  4. The AI agent swarm that attacked Hugging Face is a warning for the future
  5. Flock wants privacy to meet surveillance halfway
  6. Fake listings can turn trusted platforms into scam springboards
  7. Fake Apple Pay charge brings the classic tech support scam to your phone
  8. New Instagram and Facebook rules set a default two-hour limit for teens
  9. Update Chrome before you browse again
  10. Popular school apps may be sharing student data with advertisers
  11. Beware of fake Indeed interview apps used to install spyware
  12. Grok fooled into stealing user chat, location data, and more
  13. GTA 6 leak hunt could expose data belonging to thousands of Discord users
  14. TikTok phishing: How to spot fake login and verification pages
  15. Fake GTA 6 Extended Look and demo sites deliver an infostealer
  16. Fake Microsoft security scans trick victims into uninstalling their antivirus
  17. What happens to your data when you die? (Lock and Code S07E17)
  18. AliExpress caught using silent audio to fingerprint visitors’ browsers
  19. ToxicPanda 2.0 can take over your Android phone and banking apps
  20. Tracking PavinLoader across ClickFix and fake download campaigns
  21. A week in security (August 17 – August 23)
  22. Zombie Card: An expired Visa credit card can be used for purchases
  23. Medical records, SSNs, and bank details exposed in CareCloud data breach
  24. ChatGPT for Teens tackles risky chats and homework shortcuts
  25. Twitch wants your content for Amazon AI training. Here’s how to opt out
  26. Your Mac already has a built-in firewall. Here’s how to get more from it
  27. 9 million images of people’s faces exposed by reverse lookup service
  28. 41 deceptive download sites show a real link, then send you somewhere else
  29. Sideloading on Android: What it is, why it’s risky, and how to do it more safely
  30. Scammers are using fake crypto AML checkers to drain your wallet
  31. Update Chrome now: Two critical vulnerabilities fixed
  32. Your polite reply to that text is worth $2 on the dark web
  33. Apple fixes another image-processing flaw that could allow code execution
  34. Be careful what you put in “anyone with the link” Google Docs
  35. Heights Finance data breach: What customers need to know
  36. ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
  37. Fake TikTok rewards promise cash you’ll never get
  38. Update your Mac: Screen Sharing vulnerability exploited in the wild
  39. Why Facebook’s war on ad blockers could help scammers
  40. A week in security (August 10 – August 16)
  41. Apple now uses iPhone alerts for targets of mercenary spyware
  42. WhatsApp is testing a new warning for scam messages
  43. New Android malware lets criminals use your bank card in real time
  44. Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits
  45. “Zoomsday” flaws could let one Zoom participant attack another
  46. Patch Tuesday: Update now to fix 421 flaws, including three zero-days
  47. Fake CCleaner installs GhostDesk Chrome spyware
  48. Valve warns Steam hardware buyers: Expect fake delivery scams
  49. Social media platforms crack down on drone factory recruiting game
  50. Sexual predators targeting online accounts for intimate images, FBI warns
  51. Love/hate relationship: The AI affair. Young people love AI, but it’s breaking their trust
  52. Watch out for fake TikTok Shops trying to steal your money
  53. Fake popular sites offer a free app, instead take over PCs
  54. How to fake a data trail (and maybe lower prices) (Lock and Code S07E16)
  55. New turnkey kit makes it easy for anyone to become a scammer
  56. Edge is dropping older extensions, affecting popular privacy tools
  57. A week in security (August 3 – August 9)
  58. AI chat bots are sliding into League of Legends friend requests
  59. Meta ordered to pay $942 million over harm to children
  60. Apple WebKit vulnerabilities reveal your IP address, despite Private Relay
  61. Scammers target OnlyFans users with deepfakes
  62. Amazon and Apple impersonated in “$149.99 unauthorized charge” scam
  63. Anthropic’s Mythos AI used social engineering to target real people
  64. Google’s synchronized passkeys can be stolen in ‘Pass‑ta‑key’ attacks
  65. Junk Cleaner clears the clutter from your Android
  66. Apple battles it out again with the UK over encrypted iCloud access
  67. Travelers targeted when logging into hotel Wi-Fi networks
  68. Online backlash ends in Google rolling back Google Earth AI tool after a day
  69. WhatsApp account takeover scam asks you to “vote for my friend”
  70. “Adult TikTok” searches lead to scams
  71. The AI Act kicks into action, forces companies to be clear about AI chatbots
  72. Californians can tell data brokers to DROP their information
  73. A week in security (July 27 – August 2)

July 2026

  1. Fake Fortnite rewards are stealing players’ accounts
  2. Fake Flash Player installs AtlasRAT
  3. Malwarebytes for Windows, now available on the Microsoft Store
  4. Hims & Hers sued over alleged health data privacy failures
  5. Hidden prompt turns Microsoft Copilot into an AI worm
  6. Apple accused of letting fake crypto app steal $1.8 million
  7. Buying TikTok views or followers? Here’s what you’re really getting
  8. AI robocalls: Why caller ID is still lying to you
  9. OpenAI explains how its AI agent breached Hugging Face
  10. We found 120 fake Walmart stores trying to steal your credit card
  11. We rebuilt Malwarebytes Mobile Security for the scams of today
  12. Shared Claude chats were searchable on Google
  13. Update your iPhone, iPad and Mac to fix Apple security holes
  14. Vatican’s Click To Pray app exposed personal data from 700,000 users
  15. Aftercall ads are driving Android users crazy
  16. Sextortion scammers are exploiting ShinyHunters data leaks
  17. What’s your data worth on the dark web? (Lock and Code S07E15)
  18. A week in security (July 20 – July 26)
  19. Don’t get fooled by TikTok resin art scams
  20. Call of Duty Mobile scam uses fake free points to steal player accounts
  21. OpenAI’s agent escaped its sandbox during a security test
  22. Google wants to store a selfie video of your face
  23. Beyond the Play Store: How Android threats really spread
  24. Millions of cars could be tracked and unlocked by a hidden security flaw
  25. WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw
  26. Chick-fil-A loyalty accounts hijacked using stolen passwords
  27. Paidwork breach exposes data of 23 million users: Check if you’re affected
  28. What happens if you visit a WordPress site hacked through wp2shell?
  29. New ClickLock Stealer locks your Mac until you hand over your password
  30. Don’t trust that “FBI agent” in your DMs
  31. AI nudify apps spark legal scrutiny of Apple and Google’s profits
  32. The Odyssey piracy scams appear within hours of the movie’s release
  33. Healthcare giant Abbott probes two cyber incidents amid extortion claims
  34. Fake games spread stealers with RenPy Loader, MSBuild and EtherHiding
  35. A week in security (July 13 – July 19)
  36. Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords
  37. How to use GitHub safely
  38. The backlash against Flock cameras is spreading
  39. Security updates available for Adobe, Chrome, Firefox, VMWare, and Zoom
  40. Samsung backs down on threat to delete health data
  41. Claude for Chrome flaw could let rogue extensions access your Gmail
  42. July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days
  43. This fake Apple app can unlock your Mac’s password vault
  44. Warning: Scammers are using FaceTime to empty bank accounts
  45. The inside job that cost ransomware victims millions
  46. Trusting your kids online isn’t enough (Lock and Code S07E14)
  47. Ghostcommit attack hides malicious AI instructions in images
  48. Fake crypto gift card sites are getting harder to spot
  49. A week in security (July 6 – July 12)
  50. This new Windows malware can take over your PC and wipe it clean
  51. How mule betting scams recruit ordinary people
  52. Two Chrome updates in two days fix critical vulnerabilities
  53. How World Cup crypto prediction sites take your money
  54. 6.9 million driver’s license numbers stolen from AssuranceAmerica
  55. Microsoft fixes RoguePlanet zero-day in Defender
  56. Turn off this Meta setting before someone generates AI images of you
  57. Your next car could be watching your face
  58. How the Reddit and Discord false report scam steals accounts
  59. Fake Netflix, Coca-Cola, and FIFA job scams target marketers
  60. Claude Code’s hidden tracker was an “experiment,” says Anthropic
  61. Scammers are using AI to sell impossible flowers
  62. How to tell if an image is AI-generated
  63. Choose your WhatsApp username carefully
  64. NetNut botnet takes a hit. Don’t be part of the next one.
  65. A week in security (June 29 – July 5)
  66. Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts
  67. Apple’s Hide My Email doesn’t hide it very well
  68. Fake Google and Cloudflare verification pages spread multiple malware families
  69. WinRAR flaw could allow attackers to take control of your computer
  70. Fake Perplexity Chrome extension spies on your searches
  71. BioShocking: when “gaming” AI agents is no longer a game
  72. Chrome needs another whopper update to fix 382 security bugs
  73. ChatGPT produced graphic violent images that shocked researchers

June 2026

  1. Watch out for “high paying, low effort” Amazon job texts
  2. Update time: Apple releases security patches for iOS, MacOS Tahoe, Safari
  3. This pay gap is programmed (Lock and Code S07E13)
  4. 119 Edge extensions promised useful tools, instead downloaded malware
  5. A week in security (June 22 – June 28)
  6. Malware steals Chrome session cookies to take over your accounts
  7. Beware of “Parcel Expert” job offers: They’re parcel mule scams
  8. Update Chrome to patch critical browser security flaws
  9. Fake domain renewal emails trick website owners into paying scammers
  10. Elite network says it was hacked after members’ personal data was left exposed
  11. PixelSmash flaw turns video files into attack tools
  12. Watch out for renewal scams pretending to be Malwarebytes
  13. “Total access to all your devices.” Sextortion scammers strike again
  14. Inside the dark web: Stolen identities for 95¢, malware, and scams-for-hire
  15. Meta pauses controversial employee-tracking program after security review
  16. Hackers steal passport and driver’s license data of 3 million Texans
  17. GTA 6 early access is nothing but a scam
  18. Thousands of D-Link routers under control of AryStinger botnet
  19. Document delivery scams: What are they and what’s their goal?
  20. A week in security (June 15 – June 21)
  21. Nearly 15,000 infected websites cleaned in SocGholish crackdown
  22. Apple patches Beats Studio Buds flaw that could turn earbuds into a wiretap
  23. Microsoft working on a fix for RoguePlanet, a flaw that grants full PC control
  24. Retro gaming fans are the new target for fake GitHub malware
  25. Kodak confirms breach as ShinyHunters’ leak threat reaches deadline
  26. Roblox developers are losing entire games to malware attacks
  27. Rokarolla Android malware can take over your phone and steal banking logins
  28. 24 billion stolen records exposed online. Here’s what to do
  29. Malwarebytes earns AV-TEST Top Product award, aces other third-party tests
  30. “Free World Cup stream” sites are serving scams, not football
  31. Cardiac patients’ medical data stolen and held to ransom
  32. Deepfake posting sites depicting famous women taken down by feds
  33. Inside a malicious infrastructure delivering EtherRAT, phishing pages, and malicious software
  34. Claude Fable 5 and Mythos 5 “abruptly disabled” after US gov. ban
  35. Deepfake porn sites are going offline (re-air) (Lock and Code S07E12)
  36. A week in security (June 8 – June 14)
  37. Stolen iPhones could soon be worth a lot less to thieves
  38. Fake verification pages are stealing Steam accounts from players
  39. Google can be liable for false AI Overviews, court rules
  40. VRChat says reported data breach never happened
  41. Children’s phones must block nude images by September, UK says
  42. Free Spotify Premium hacks on social media are spreading infostealers
  43. Microsoft’s biggest-ever Patch Tuesday fixes 206 bugs, including 3 zero-days
  44. 88% of people struggle to tell what’s real online
  45. Meta’s face-recognition code raises new concerns about smart glasses
  46. Scammers love Meta, according to Lloyds Bank
  47. Update Chrome: Google patches actively exploited vulnerability and 73 others
  48. Americans lost nearly $900 million to AI-powered scams, FBI says
  49. Pirated PC games are delivering password-stealing malware
  50. A week in security (June 1 – June 7)
  51. AI: Threat, tool, or both?
  52. Travel scams are everywhere. Here’s how to avoid them
  53. Meta’s AI support bot happily handed Instagram accounts to hackers
  54. We found this fake-invoice campaign while scammers were still building it
  55. Keep getting calls from questionable numbers? Meet Scam Number Check
  56. Infostealers are becoming the go-to phishing payload
  57. These convincing copyright notices are designed to steal Google logins
  58. 23andMe exposed genetic information of millions, lawsuit says
  59. Fake virus alerts are invading mobile games
  60. Fake BlueWallet steals passwords, accounts, and crypto from Macs
  61. Your phone called. It needs a cleanup.
  62. A week in security (May 25 – May 31)
  63. Payment apps are watching what you say (Lock and Code S07E11)

May 2026

  1. Signal users targeted in backup-stealing phishing attacks
  2. Carnival confirms data breach impacting nearly 6 million
  3. Your Windows PC has a security deadline in June 2026
  4. Fake ChatGPT download site infects Windows and Mac users with malware
  5. Kali365 phishing kit bypasses MFA and steals Microsoft logins
  6. Company bragged phone mics could listen to conversations. They couldn’t.
  7. Fake LinkedIn emails abuse Adobe to track victims
  8. Fake software on GitHub and SourceForge distribute Deno RAT
  9. 700+ education and tech websites hijacked in huge ClickFix malware campaign
  10. Scammers pretending to be Microsoft had help from US executives
  11. A week in security (May 18 – May 24)
  12. Update Chrome now: Critical bugs could let attackers run code
  13. Microsoft Defender vulnerabilities are being exploited in the wild
  14. TikTok, YouTube, and Roblox face scrutiny, but age gates won’t fix child safety
  15. Catch spyware in the act with Windows Webcam Monitoring
  16. Researchers left AI agents alone in a virtual town and watched it all unravel
  17. Fake malware-signing service Fox Tempest dismantled by Microsoft
  18. Firefox 151 packs big privacy upgrades into a small update
  19. Biometrics, diagnoses, and bank details exposed in major healthcare breach
  20. Facebook scam promises cheap Aldi meat boxes, steals payment info instead
  21. YouTube wants your face to fight deepfakes
  22. Microsoft is changing Edge’s plaintext password behavior
  23. A week in security (May 11 – May 17)
  24. AI is distorting the Holocaust (Lock and Code S07E10)
  25. Attackers replaced JDownloader installer downloads with malware
  26. Meta’s confusing new approach to chat privacy
  27. Why Malwarebytes blocks some Yahoo Mail redirects
  28. Deepfake sextortion forces schools to remove student photos from websites
  29. Texas sued Netflix over claims it secretly collected and sold users’ data
  30. May 2026 Patch Tuesday: no zero-days but plenty to fix
  31. Fake Claude search results lure Mac users into ClickFix attack
  32. 1 in 8 employees have sold company logins or know someone who has
  33. Stolen Canvas data was “returned” after hacker agreement, Instructure says
  34. Yarbo responds to robot flaws that could mow down their owners
  35. A week in security (May 4 – May 10)
  36. Microsoft says Edge’s plaintext password behavior is “by design”
  37. ShinyHunters escalates Canvas attacks with school login defacements
  38. Massive AI investment scam network spans 15,500 domains
  39. If a fake moustache can fool age checks, is the Online Safety Act working?
  40. Google Chrome’s silent 4GB AI download problem [updated]
  41. Attackers adopt JavaScript runtime Bun to spread NWHStealer
  42. Millions of students’ personal data stolen in major education breach
  43. Update WhatsApp now: Two new flaws could expose you to malicious files
  44. Cyberattacks are raising your prices (Lock and Code S07E09)
  45. Thousands of Facebook accounts stolen by phishing emails sent through Google
  46. The 2026 World Cup scam economy is already running before the first whistle
  47. A week in security (April 27 – May 3)
  48. 3 easy-to-miss cybersecurity risks for small businesses
  49. Actively exploited cPanel bug exposes millions of websites to takeover

April 2026

  1. More PayPal emails hijacked to deliver tech support scams
  2. Hackers stole hundreds of thousands of Roblox accounts: Here’s what to do
  3. Researchers built a chatbot that only knows the world before 1931
  4. Microsoft won’t patch PhantomRPC: Feature or bug?
  5. Scam-checking just got a lot easier: Malwarebytes is now in Claude
  6. Fake CAPTCHA scam turns a quick click into a costly phone bill
  7. Chinese engineer stole US military and NASA software for years
  8. A week in security (April 20 – April 26)
  9. Medical data of 500,000 UK volunteers listed for sale on Alibaba
  10. How cyberattacks on companies affect everyone
  11. Apple fixes iOS bug that kept deleted notifications, including chat previews
  12. Roblox clamps down on chats and age checks as legal pressure builds
  13. Malicious trading website drops malware that hands your browser to attackers
  14. Researcher claims Claude Desktop installs “spyware” on macOS
  15. Fake Google Antigravity downloads are stealing accounts in minutes
  16. Real Apple notifications are being used to drive tech support scams
  17. Android 17 ends all-or-nothing access to your contacts
  18. Big Tech can stop scams. They just don’t (Lock and Code S07E08)
  19. Mythos: An AI tool too powerful for public release
  20. A week in security (April 13 – April 19)
  21. This old-school scam is still working
  22. “Your shipment has arrived” email hides remote access software
  23. Browser Guard gets even better with Access Control
  24. “iCloud storage is full” scam is back, and now it wants your payment details
  25. A fake Slack download is giving attackers a hidden desktop on your machine
  26. Booking.com breach gives scammers what they need to target guests
  27. AI clickbait can turn your notifications into a scam feed
  28. Fake YouTube copyright notices can steal your Google login
  29. From fake Proton VPN sites to gaming mods, this Windows infostealer is everywhere
  30. April Patch Tuesday fixes two zero-days, including one under active attack
  31. Credit Resources Vault: Why this credit email set off our scam alarms
  32. Omnistealer uses the blockchain to steal everything it can
  33. ChatGPT under scrutiny as Florida investigates campus shooting
  34. Simply opening a PDF could trigger this Adobe Reader zero-day
  35. A week in security (April 6 – April 12)
  36. Fake Claude site installs malware that gives attackers access to your computer
  37. ClickFix finds a new way to infect Macs
  38. Scammers pose as Amazon support to steal your account
  39. NSFW app leak exposes 70,000 prompts linked to individual users
  40. 30,000 private Facebook images allegedly downloaded by Meta employee
  41. This fake Windows support website delivers password-stealing malware
  42. Your extensions leak clues about you, so we made sure Browser Guard doesn’t
  43. Russian hacking group targets home and small office routers to spy on users
  44. Timeshare owners warned to watch out for cartel-linked scams
  45. Traffic violation scams swap links for QR codes to steal your card details
  46. Support platform breach exposes Hims & Hers customer data
  47. A week in security (March 30 – April 5)
  48. Killer robots are here. Now what? (Lock and Code S07E07)
  49. That dream job offer from Coca-Cola or Ferrari? It’s a trap for your passwords
  50. Blocking children from social media is a badly executed good idea
  51. Apple expands “DarkSword” patches to iOS 18.7.7
  52. Malwarebytes Privacy VPN receives full third-party audit
  53. Wikipedia’s AI agent row likely just the beginning of the bot-ocalypse
  54. WhatsApp on Windows users targeted in new campaign, warns Microsoft
  55. Why we’re still not doing April Fools’ Day

March 2026

  1. Asking AI for personal advice is a bad idea, Stanford study shows
  2. Axios supply chain attack chops away at npm trust
  3. New macOS security feature will alert users about possible ClickFix attacks
  4. A week in security (March 23 – March 29)
  5. Criminals are renting virtual phones to bypass bank security
  6. Bogus Avast website fakes virus scan, installs Venom Stealer instead
  7. Infiniti Stealer: a new macOS infostealer using ClickFix and Python/Nuitka
  8. GlassWorm attack installs fake browser extension for surveillance
  9. Landmark verdicts put Meta’s “addiction machine” platforms on trial
  10. Hackers claim to have accessed data tied to millions of crime tipsters
  11. New FCC router ban could leave home networks less secure
  12. Meet Khaled Mohamed: the bug hunter who found a Microsoft flaw
  13. FBI, CISA warn of Russian hackers hijacking Signal and WhatsApp accounts
  14. Scam compounds hiring “AI models” to seal the deal in deepfake video calls
  15. FriendlyDealer mimics official app stores to push unvetted gambling apps
  16. The March Madness scam playbook
  17. Advanced Flow will make Android sideloading safer
  18. A week in security (March 16 – March 22)
  19. This is all it takes to stop a train (Lock and Code S07E06)
  20. Could your face change what you pay? NYC wants limits on biometric tracking
  21. That “job brief” on Google Forms could infect your device
  22. [updated] A DarkSword hangs over unpatched iPhones
  23. Your tax forms sell for $20 on the dark web
  24. Researchers found font-rendering trick to hide malicious commands
  25. Apple patches WebKit bug that could let sites access your data
  26. Inside a network of 20,000+ fake shops
  27. Fake Pudgy World site steals your crypto passwords
  28. 90% of people don’t trust AI with their data
  29. How searching for a VPN could mean handing over your work login details
  30. Google cracks down on Android apps abusing accessibility
  31. Hacked sites deliver Vidar infostealer to Windows users
  32. Zombie ZIP method can fool antivirus during the first scan
  33. Delete doesn’t mean gone. Here’s how File Shredder fixes that
  34. A week in security (March 9 – March 15)
  35. Watch out for fake Malwarebytes renewal notices in your calendar
  36. [updated] Google patches two Chrome zero-days under active attack
  37. Attackers impersonate Temu in ClickFix $Temu airdrop scam
  38. Apple patches Coruna exploit kit flaws for older iOS versions
  39. This Android vulnerability can break your lock screen in under 60 seconds
  40. Microsoft Authenticator could leak login codes—update your app now
  41. Meta rolls out anti-scam tools across WhatsApp, Facebook, and Messenger
  42. Phishers hide scam links with IPv6 trick in “free toothbrush” emails
  43. Sextortion “I recorded you” emails reuse passwords found in disposable inboxes
  44. Watch out for tax-season robocalls pushing fake “relief programs”
  45. March 2026 Patch Tuesday fixes two zero-day vulnerabilities
  46. How to see your Google Search history (and delete it)
  47. Signal and WhatsApp accounts targeted in phishing campaign
  48. Hackers may have breached FBI wiretap network via supply chain
  49. Fake Claude Code install pages hit Windows and Mac users with infostealers
  50. Quiz sites trick users into enabling unwanted browser notifications
  51. A week in security (March 2 – March 8)
  52. Ring doorbells: Won’t you see my neighbor? (Lock and Code S07E05)
  53. One click on this fake Google Meet update can give attackers control of your PC [updated]
  54. Beware of fake OpenClaw installers, even if Bing points you to GitHub
  55. Fake CleanMyMac site installs SHub Stealer and backdoors crypto wallets
  56. Windows File Shredder: When deleting a file isn’t enough
  57. Supreme Court to decide whether geofence warrants are constitutional
  58. Does the UK really want to ban VPNs? And can it be done?
  59. Attackers abuse OAuth’s built-in redirects to launch phishing and malware attacks
  60. High-severity Qualcomm bug hits Android devices in targeted attacks
  61. Pentagon ditches Anthropic AI over “security risk” and OpenAI takes over
  62. Chrome flaw let extensions hijack Gemini’s camera, mic, and file access
  63. Samsung TVs stop spying on viewers in Texas. Here’s how to disable ACR anywhere
  64. A fake FileZilla site hosts a malicious download
  65. Purchase order attachment isn’t a PDF. It’s phishing for your password
  66. A week in security (February 23 – March 1)

February 2026

  1. Public Google API keys can be used to expose Gemini AI data
  2. Inside a fake Google security check that becomes a browser RAT
  3. Fake Zoom and Google Meet scams install Teramind: A technical deep dive
  4. How to understand and avoid Advanced Persistent Threats
  5. The Conduent breach; from 10 million to 25 million (and counting)
  6. Instagram flagged explicit messages to minors in 2018. Image-blurring arrived six years later
  7. Developer creates app to detect nearby smart glasses
  8. Reddit, porn sites fined by UK regulators over children’s safety and privacy
  9. Roblox gives predators “powerful tools” to target children, says LA County
  10. Fake Zoom meeting “update” silently installs unauthorized version of monitoring tool abused by cybercriminals to spy on victims
  11. Refund scam impersonates Avast to harvest credit card details
  12. OpenClaw: What is it and can you use it safely?
  13. Password managers keep your passwords safe, unless…
  14. Fake Huorong security site infects users with ValleyRAT
  15. A week in security (February 16 – February 22)
  16. What can’t you say on TikTok?
  17. [updated] Age verification vendor Persona left frontend exposed, researchers say
  18. Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets
  19. AI-generated passwords are a security risk
  20. Intimate products maker Tenga spilled customer data
  21. Meta patents AI that could keep you posting from beyond the grave
  22. Betterment data breach might be worse than we thought
  23. Job scam uses fake Google Forms site to harvest Google logins
  24. Scammers use fake “Gemini” AI chatbot to sell fake “Google Coin”
  25. Chrome “preloading” could be leaking your data and causing problems in Browser Guard
  26. Scam Guard for desktop: A second set of eyes for suspicious moments
  27. Update Chrome now: Zero-day bug allows code execution via malicious webpages
  28. Hobby coder accidentally creates vacuum robot army
  29. ClickFix added nslookup commands to its arsenal for downloading RATs
  30. A week in security (February 9 – February 15)
  31. How to find and remove credential-stealing Chrome extensions
  32. Fake shops target Winter Olympics 2026 fans
  33. Outlook add-in goes rogue and steals 4,000 credentials and payment data
  34. Child exploitation, grooming, and social media addiction claims put Meta on trial
  35. Apple patches zero-day flaw that could let attackers take control of devices
  36. Criminals are using AI website builders to clone major brands
  37. February 2026 Patch Tuesday includes six actively exploited zero-days
  38. Malwarebytes earns PCMag Best Tech Brand spot, scores 100% with MRG Effitas
  39. Discord will limit profiles to teen-appropriate mode until you verify your age
  40. How safe are kids using social media? We did the groundwork
  41. Man tricked hundreds of women into handing over Snapchat security codes
  42. Is your phone listening to you? (re-air) (Lock and Code S07E03)
  43. AI chat app leak exposes 300 million messages tied to 25 million users
  44. Fake 7-Zip downloads are turning home PCs into proxy nodes
  45. A week in security (February 2 – February 8)
  46. Apple Pay phish uses fake support calls to steal payment details
  47. Open the wrong “PDF” and attackers gain remote access to your PC
  48. Flock cameras shared license plate data without permission
  49. Grok continues producing sexualized images after promised fixes
  50. Firefox is giving users the AI off switch
  51. An AI plush toy exposed thousands of private chats with children
  52. AT&T breach data resurfaces with new risks for customers
  53. Apple’s new iOS setting addresses a hidden layer of location tracking
  54. [updated] A fake cloud storage alert that ends at Freecash
  55. How Manifest v3 forced us to rethink Browser Guard, and why that’s a good thing
  56. Scam-checking just got easier: Malwarebytes is now in ChatGPT
  57. How fake party invitations are being used to install remote access tools
  58. A week in security (January 26 – February 1)

January 2026

  1. Match, Hinge, OkCupid, and Panera Bread breached by ransomware group
  2. TikTok’s privacy update mentions immigration status. Here’s why.
  3. Meta confirms it’s working on premium subscription for its apps
  4. Microsoft Office zero-day lets malicious documents slip past security checks
  5. Clawdbot’s rename to Moltbot sparks impersonation campaign
  6. Malicious Chrome extensions can spy on your ChatGPT chats
  7. WhatsApp rolls out new protections against advanced exploits and spyware
  8. Watch out for AT&T rewards phishing text that wants your personal details
  9. A WhatsApp bug lets malicious media files spread through group chats
  10. TikTok narrowly avoids a US ban by spinning up a new American joint venture
  11. Get paid to scroll TikTok? The data trade behind Freecash ads
  12. One privacy change I made for 2026 (Lock and Code S07E02)
  13. A week in security (January 19 – January 25)
  14. Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?
  15. Fake LastPass maintenance emails target users
  16. Under Armour ransomware breach: data of 72 million customers appears on the dark web
  17. Can you use too many LOLBins to drop some RATs?
  18. Malicious Google Calendar invites could expose private data
  19. Fake extension crashes browsers to trick users into infecting themselves
  20. Google will pay $8.25m to settle child data-tracking allegations
  21. Firefox joins Chrome and Edge as sleeper extensions spy on users
  22. A week in security (January 12 – January 18)
  23. WhisperPair exposes Bluetooth earbuds and headphones to tracking and eavesdropping
  24. Dutch police sell fake tickets to show how easily scams work
  25. “Reprompt” attack lets attackers steal data from Microsoft Copilot
  26. Phishing scammers are posting fake “account restricted” comments on LinkedIn
  27. Online shoppers at risk as Magecart skimming hits major payment networks
  28. How real software downloads can hide remote backdoors
  29. Data broker fined after selling Alzheimer’s patient info and millions of sensitive profiles
  30. Why iPhone users should update and restart their devices now
  31. Received an Instagram password reset email? Here’s what you need to know
  32. Regulators around the world are scrutinizing Grok over sexual deepfakes
  33. Celebrating reviews and recognitions for Malwarebytes in 2025
  34. A week in security (January 5 – January 11)
  35. Enshittification is ruining everything online (Lock and Code S07E01)
  36. pcTattletale founder pleads guilty as US cracks down on stalkerware
  37. Are we ready for ChatGPT Health?
  38. CISA warns of active attacks on HPE OneView and legacy PowerPoint
  39. Lego’s Smart Bricks explained: what they do, and what they don’t
  40. Fake WinRAR downloads hide malware behind a real installer
  41. One million customers on alert as extortion group claims massive Brightspeed data haul
  42. Phishing campaign abuses Google Cloud services to steal Microsoft 365 logins
  43. Disney fined $10m for mislabeling kids’ YouTube videos and violating privacy law
  44. ALPRs are recording your daily drive (Lock and Code S06E26)
  45. Grok apologizes for creating image of young girls in “sexualized attire”
  46. A week in security (December 29 – January 4)
  47. How AI made scams more convincing in 2025

2025 534

December 2025

  1. In 2025, age checks started locking people out of the internet
  2. 2025 exposed the risks we ignored while rushing AI
  3. Malware in 2025 spread far beyond Windows PCs
  4. A week in security (December 22 – December 28)
  5. Hacktivists claim near-total Spotify music scrape
  6. Pornhub tells users to expect sextortion emails after data exposure
  7. A week in security (December 15 – December 21)
  8. CISA warns ASUS Live Update backdoor is still exploitable, seven years on
  9. The ghosts of WhatsApp: How GhostPairing hijacks accounts
  10. Chrome extension slurps up AI chats after users installed it for privacy
  11. Two Chrome flaws could be triggered by simply browsing the web: Update now
  12. Inside a purchase order PDF phishing campaign
  13. SoundCloud, Pornhub, and 700Credit all reported data breaches, but the similarities end there
  14. Android mobile adware surges in second half of 2025
  15. Photo booth flaw exposes people’s private pictures online
  16. Google is discontinuing its dark web report: why it matters
  17. Pig butchering is the next “humanitarian global crisis” (Lock and Code S06E25)
  18. PayPal closes loophole that let scammers send real emails with fake purchase notices
  19. A week in security (December 8 – December 14)
  20. The US digital doxxing of H-1B applicants is a massive privacy misstep
  21. Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer
  22. How private is your VPN?
  23. DroidLock malware locks you out of your Android device and demands ransom
  24. Malwarebytes for Mac now has smarter, deeper scans
  25. [Updated] Another Chrome zero-day under attack: update now
  26. December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices
  27. GhostFrame phishing kit fuels widespread attacks against millions
  28. Prompt injection is a problem that may never be fixed, warns NCSC
  29. EU fines X $140m, tied to verification rules that make impostor scams easier
  30. Deepfakes, AI resumes, and the growing threat of fake applicants
  31. How phishers hide banking scams behind free Cloudflare Pages
  32. Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI
  33. A week in security (December 1 – December 7)
  34. Leaks show Intellexa burning zero-days to keep Predator spyware running
  35. How scammers use fake insurance texts to steal your identity
  36. Canadian police trialing facial recognition bodycams
  37. Update Chrome now: Google fixes 13 security issues affecting billions
  38. Attackers have a new way to slip past MFA in educational orgs
  39. How attackers use real IT tools to take over your computer
  40. Fileless protection explained: Blocking the invisible threat others miss
  41. “Sleeper” browser extensions woke up as spyware on 4 million devices
  42. Air fryer app caught asking for voice data (re-air) (Lock and Code S06E24)
  43. Whispering poetry at AI can make it break its own rules
  44. Google patches 107 Android flaws, including two being actively exploited
  45. New Android malware lets criminals control your phone and drain your bank account
  46. Malwarebytes joins Global Anti-Scam Alliance (GASA) as supporting member
  47. A week in security (November 24 – November 30)

November 2025

  1. How CVSS v4.0 works: characterizing and scoring vulnerabilities
  2. Millions at risk after nationwide CodeRED alert system outage and data breach
  3. Holiday shoppers targeted as Amazon and FBI warn of surge in account takeover attacks
  4. Fake LinkedIn jobs trick Mac users into downloading Flexible Ferret malware
  5. New ClickFix wave infects users with hidden malware in images and fake Windows updates
  6. WhatsApp closes loophole that let researchers collect data on 3.5B accounts
  7. The hidden costs of illegal streaming and modded Amazon Fire TV Sticks
  8. Black Friday scammers offer fake gifts from big-name brands to empty bank accounts
  9. Matrix Push C2 abuses browser notifications to deliver phishing and malware
  10. A week in security (November 17 – November 23)
  11. AI teddy bear for kids responds with sexual content and advice about weapons
  12. Fake calendar invites are spreading. Here’s how to remove them and prevent more
  13. Budget Samsung phones shipped with unremovable spyware, say researchers
  14. What the Flock is happening with license plate readers?
  15. Holiday scams 2025: These common shopping habits make you the easiest target
  16. [Correction] Gmail can read your emails and attachments to power “smart features”
  17. Mac users warned about new DigitStealer information stealer
  18. Attackers are using “Sneaky 2FA” to create fake sign-in windows that look real
  19. Sharenting: are you leaving your kids’ digital footprints for scammers to find?
  20. Chrome zero-day under active attack: visiting the wrong site could hijack your browser
  21. Thieves order a tasty takeout of names and addresses from DoorDash
  22. Why it matters when your online order is drop-shipped
  23. The price of ChatGPT’s erotic chat? $20/month and your identity
  24. Your coworker is tired of AI “workslop” (Lock and Code S06E23)
  25. Scammers are sending bogus copyright warnings to steal your X login
  26. A week in security (November 10 – November 16)
  27. Be careful responding to unexpected job interviews
  28. Your passport, now on your iPhone. Helpful or risky?
  29. 1 million victims, 17,500 fake sites: Google takes on toll-fee scammers
  30. Are you paying more than other people? NY cracks down on surveillance pricing
  31. We opened a fake invoice and fell down a retro XWorm-shaped wormhole
  32. Phishing emails disguised as spam filter alerts are stealing logins
  33. Update now: November Patch Tuesday fixes Windows zero-day exploited in the wild
  34. How Malwarebytes stops the ransomware attack that most security software can’t see
  35. Samsung zero-day lets attackers take over your phone
  36. How credentials get stolen in seconds, even with a script-kiddie-level phish
  37. Stolen iPhones are locked tight, until scammers phish your Apple ID credentials
  38. Fantasy Hub is spyware for rent—complete with fake app kits and support
  39. Watch out for Walmart gift card scams
  40. A week in security (November 3 – November 9)
  41. Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025
  42. Fake CAPTCHA sites now have tutorial videos to help victims install malware
  43. Hackers commit highway robbery, stealing cargo and goods
  44. Android malware steals your card details and PIN to make instant ATM withdrawals
  45. Take control of your privacy with updates on Malwarebytes for Windows
  46. Cyberattacks on UK water systems reveal rising risks to critical infrastructure
  47. Should you let Chrome store your driver’s license and passport?
  48. Apple patches 50 security flaws—update now
  49. “Sneaky” new Android malware takes over your phone, hiding in fake news and ID apps
  50. Sling TV turned privacy into a game you weren’t meant to win
  51. Attack of the clones: Fake ChatGPT apps are everywhere
  52. Would you sext ChatGPT? (Lock and Code S06E22)
  53. Malwarebytes aces PCMag Readers’ Choice Awards and AVLab Cybersecurity Foundation tests
  54. A week in security (October 27 – November 2)

October 2025

  1. Update Chrome now: 20 security fixes just landed
  2. How scammers use your data to create personalized tricks that work
  3. Ransomware gang claims Conduent breach: what you should watch for next [updated]
  4. Fake PayPal invoice from Geek Squad is a tech support scam
  5. Atlas browser’s Omnibox opens up new privacy and security risks
  6. Gmail breach panic? It’s a misunderstanding, not a hack
  7. School’s AI system mistakes a bag of chips for a gun
  8. Around 70 countries sign new UN Cybercrime Convention—but not everyone’s on board
  9. NSFW ChatGPT? OpenAI plans “grown-up mode” for verified adults
  10. How to set up two factor authentication (2FA) on your Instagram account
  11. Phishing scam uses fake death notices to trick LastPass users
  12. A week in security (October 20 – October 26)
  13. Is AI moving faster than its safety net?
  14. Thousands of online stores at risk as SessionReaper attacks spread
  15. Apple may have to open its walled garden to outside app stores
  16. Meta boosts scam protection on WhatsApp and Messenger
  17. Over 100 Chrome extensions break WhatsApp’s anti-spam rules
  18. Home Depot Halloween phish gives users a fright, not a freebie
  19. Zero-click Dolby audio bug lets attackers run code on Android and Windows devices
  20. Windows update breaks USB support in recovery mode
  21. You can poison AI with just 250 dodgy documents
  22. What does Google know about me? (Lock and Code S06E21)
  23. Chinese gangs made over $1 billion targeting Americans with scam texts
  24. A week in security (October 13 – October 19)
  25. Prosper data breach puts 17 million people at risk of identity theft
  26. Under the engineering hood: Why Malwarebytes chose WordPress as its CMS
  27. Video call app Huddle01 exposed 600K+ user logs
  28. Mango discloses data breach at third-party provider
  29. Roku accused of selling children’s data to advertisers and brokers
  30. TikTok scam sells you access to your own fake money
  31. Scammers are still sending us their fake Robinhood security alerts
  32. Satellites leak voice calls, text messages and more
  33. AI-driven scams are preying on Gen Z’s digital lives​
  34. Pixel-stealing “Pixnapping” attack targets Android devices
  35. Researchers break OpenAI guardrails
  36. Phishing scams exploit New York’s inflation refund program
  37. A week in security (October 6 – October 12)
  38. Apple voices concerns over age-check law that could put user privacy at risk
  39. Your passwords don’t need so many fiddly characters, NIST says
  40. Millions of (very) private chats exposed by two AI companion apps
  41. Fake VPN and streaming app drops malware that drains your bank account
  42. California just put people back in control of their data
  43. One stolen iPhone uncovered a network smuggling thousands of devices to China
  44. Modeling scams see mature models as attractive new prospects
  45. Is your computer mouse eavesdropping on you?
  46. “Can you test my game?” Fake itch.io pages spread hidden malware to gamers
  47. Don’t connect your wallet: Best Wallet cryptocurrency scam is making the rounds
  48. Troops and veterans’ personal information leaked in CPAP Medical data breach
  49. Discord warns users after data stolen in third-party breach
  50. Phishers target 1Password users with convincing fake breach alert
  51. What’s there to save about social media? (Lock and Code S06E20)
  52. How to set up two-factor authentication (2FA) on your Facebook account
  53. A week in security (September 29 – October 5)
  54. From threats to apology, hackers pull child data offline after public backlash
  55. Your Meta AI conversations may come back as ads in your feed
  56. Scam Facebook groups send malicious Android malware to seniors
  57. Sendit tricked kids, harvested their data, and faked messages, FTC claims
  58. Gemini AI flaws could have exposed your data

September 2025

  1. Tile trackers plagued by weak security, researchers warn
  2. Apple fixes critical font processing bug. Update now!
  3. 260 romance scammers and sextortionists caught in huge Interpol sting
  4. Amazon pays $2.5B settlement over deceptive Prime subscriptions
  5. Sex offenders, terrorists, drug dealers, exposed in spyware breach
  6. A week in security (September 22 – September 28)
  7. Hackers threaten parents: Get nursery to pay ransom or we leak your child’s data
  8. Google and Flo to pay $56 million after misusing users’ health data
  9. Neon App pays users to record their phone calls, sells data for AI training [updated]
  10. New SVG-based phishing campaign is a recipe for disaster
  11. LinkedIn will use your data to train its AI unless you opt out now
  12. TikTok is misusing kids’ data, says privacy watchdog
  13. Police using drones to read your license plates, warns EFF
  14. Malwarebytes for Teams now includes VPN
  15. Fake Malwarebytes, LastPass, and others on GitHub serve malware
  16. Can you disappear online? (Lock and Code S06E19)
  17. American Archive of Public Broadcasting allowed access to restricted media for years
  18. Scammers are impersonating the FBI to steal your personal data
  19. Beware of Zelle transfer scams
  20. ChatGPT solves CAPTCHAs if you tell it they’re fake
  21. A week in security (September 15 – September 21)
  22. ChatGPT Deep Research zero-click vulnerability fixed by OpenAI
  23. Disrupted phishing service was after Microsoft 365 credentials
  24. Update your Chrome today: Google patches 4 vulnerabilities including one zero-day
  25. Age verification and parental controls coming to ChatGPT to protect teens
  26. 224 malicious apps removed from the Google Play Store after ad fraud campaign discovered
  27. Airline data broker selling 5 billion passenger records to US government
  28. Update your Apple devices to fix dozens of vulnerabilities
  29. Grok, ChatGPT, other AIs happy to help phish senior citizens
  30. “A dare, a challenge, a bit of fun:” Children are hacking their own schools’ systems, says study
  31. Watch out for the “We are hiring” remote online evaluator message scam
  32. A week in security (September 8 – September 14)
  33. AI browsers or agentic browsers: a look at the future of web surfing
  34. From Fitbit to financial despair: How one woman lost her life savings and more to a scammer
  35. Meta ignored child sex abuse in VR, say whistleblowers
  36. When AI chatbots leak and how it happens
  37. Fake Bureau of Motor Vehicles texts are after your personal and banking details
  38. ‘Astronaut-in-distress’ romance scammer steals money from elderly woman
  39. Ransomware attack at blood center: Org tells users their data’s been stolen
  40. Pre-approved GLP-1 prescription scam could be bad for your health
  41. Plex users: Reset your password!
  42. Popeyes, Tim Hortons, Burger King platforms have “catastrophic” vulnerabilities, say hackers
  43. Google misled users about their privacy and now owes them $425m, says court
  44. This “insidious” police tech claims to predict crime (Lock and Code S06E18)
  45. iCloud Calendar infrastructure abused in PayPal phishing campaign
  46. A week in security (September 1 – September 7)
  47. Nexar dashcam video database hacked
  48. Roblox introduces age checks to use communication features
  49. Give your PC a fresh start: New free tools to boost your PC’s speed, security, and peace of mind
  50. TP-Link warns of botnet infecting routers and targeting Microsoft 365 accounts
  51. Popular Android VPN apps found to have security flaws and China links
  52. No we didn’t warn all Gmail users about imminent digital doom, says Google
  53. Update your Android! Google patches 111 vulnerabilities, 2 are critical
  54. Why you should upgrade to Windows 11 now, and how to do it
  55. PayPal users targeted in account profile scam
  56. Tax refund scam targets Californians
  57. WhatsApp fixes vulnerability used in zero-click attacks
  58. How to set up two-step verification on your WhatsApp account
  59. Travelers to the UK targeted in ETA scams
  60. A week in security (August 25 – August 31)

August 2025

  1. Microsoft wants to automatically save your Word docs to the cloud
  2. “No place in our networks”: FCC hangs up on thousands of voice operators in robocall war
  3. Claude AI chatbot abused to launch “cybercrime spree”
  4. Developer verification: a promised lift for Android security
  5. More vulnerable stalkerware victims’ data exposed in new TheTruthSpy flaw
  6. 77 malicious apps removed from Google Play Store
  7. AI browsers could leave users penniless: A prompt injection warning
  8. A week in security (August 18 – August 24)
  9. How a scam hunter got scammed (Lock and Code S06E17)
  10. Clickjack attack steals password managers’ secrets
  11. Grok chats show up in Google searches
  12. All Apple users should update after company patches zero-day vulnerability in all platforms
  13. Google settles YouTube lawsuit over kids’ privacy invasion and data collection
  14. AI-powered stuffed animals: A good alternative for screen time?
  15. How to spot the latest fake Gmail security alerts
  16. Instagram Map: What is it and how do I control it?
  17. A week in security (August 11 – August 17)
  18. Italian hotels breached for tens of thousands of scanned IDs
  19. National Public Data returns after massive Social Security Number leak
  20. Romance scammers in Ghana charged with more than $100 million in theft
  21. Netflix scammers target jobseekers to trick them into handing over their Facebook logins
  22. Russians hacked US courts, say investigators
  23. Microsoft patches some very important vulnerabilities in August’s patch Tuesday
  24. WinRAR vulnerability exploited by two different groups
  25. Scam hunter scammed by tax office impersonators
  26. That “Amazon Safety Recall” message may well be a scam
  27. “The worst thing” for online rights: An age-restricted grey web (Lock and Code S06E16)
  28. Online portal exposed car and personal data, allowed anyone to remotely unlock cars
  29. A week in security (August 4 – August 10)
  30. Adult sites trick users into Liking Facebook posts using a clickjack Trojan
  31. Facebook users targeted in ‘login’ phish
  32. TeaOnHer, the male version of Tea, is leaking personal information on its users too
  33. How Google, Adidas, and more were breached in a Salesforce scam
  34. Meta accessed women’s health data from Flo app without consent, says court
  35. Malwarebytes earns MRG Effitas Android 360° Certificate for mobile threat detection
  36. Weight loss scams, or why ‘Jodie Foster’ wants me to lose weight
  37. Perplexity AI ignores no-crawling rules on websites, crawls them anyway
  38. Critical Android vulnerabilities patched—update as soon as you can
  39. Alleged ‘tap-in’ scammer advertised services on social media
  40. Unexpected snail mail packages are being sent with scammy QR codes, warns FBI
  41. A week in security (July 28 – August 3)
  42. Apple ID scam leads to $27,000 in-person theft of Ohio man
  43. OpenAI kills “short-lived experiment” where ChatGPT chats could be found on Google

July 2025

  1. Trump Administration and Big Tech want you to share your health data
  2. Prison visitor details shared with all inmates at correctional facility
  3. That seemingly innocent text is probably a scam
  4. VPN use rises following Online Safety Act’s age verification controls
  5. Apple patches multiple vulnerabilities in iOS and iPadOS. Update now!
  6. Tea Dating Advice app has users’ private messages disclosed
  7. Allianz Life says majority of 1.4 million US customers’ info breached
  8. How the FBI got everything it wanted (re-air) (Lock and Code S06E15)
  9. A week in security (July 21 – July 27)
  10. Steam games abused to deliver malware once again
  11. Watch out: Instagram users targeted in novel phishing campaign
  12. Age verification: Child protection or privacy risk?
  13. iPhone vs. Android: iPhone users more reckless, less protected online
  14. Introducing the smarter, more sophisticated Malwarebytes Trusted Advisor, your cybersecurity personal assistant
  15. AI-generated image watermarks can be easily removed, say researchers
  16. Proton launches Lumo, a privacy-focused AI chatbot
  17. Startup takes personal data stolen by malware and sells it on to other companies
  18. ‘Car crash victim’ calls mother for help and $15K bail money. But it’s an AI voice scam
  19. “Ring cameras hacked”? Amazon says no, users not so sure
  20. A week in security (July 14 – July 20)
  21. Meta execs pay the pain away with $8 billion privacy settlement
  22. Adoption agency leaks over a million records
  23. Meta AI chatbot bug could have allowed anyone to see private conversations
  24. WeTransfer walks back clause that said it would train AI on your files
  25. Chrome fixes 6 security vulnerabilities. Get the update now!
  26. Dating app scammer cons former US army colonel into leaking national secrets
  27. Amazon warns 200 million Prime customers that scammers are after their login info
  28. Is AI “healthy” to use? (Lock and Code S06E14)
  29. CNN, BBC, and CNBC websites impersonated to scam people
  30. A week in security (July 7 – July 13)
  31. Deepfake criminals impersonate Marco Rubio to uncover government secrets
  32. McDonald’s AI bot spills data on job applicants
  33. Millions of people spied on by malicious browser extensions in Chrome and Edge
  34. No thanks: Google lets its Gemini AI access your apps, including messages [updated]
  35. Ransomware negotiator investigated over criminal gang kickbacks
  36. Free certificates for IP addresses: security problem or solution?
  37. Gamers hacked playing Call of Duty: WWII—PC version temporarily taken offline
  38. A week in security (June 30 – July 6)
  39. Drug cartel hacked cameras and phones to spy on FBI and identify witnesses
  40. Catwatchful “child monitoring” app exposes victims’ data
  41. Microsoft, PayPal, DocuSign, and Geek Squad faked in callback phishing scams
  42. Qantas: Breach affects 6 million people, “significant” amount of data likely taken
  43. Update your Chrome to fix new actively exploited zero-day vulnerability
  44. Bluetooth vulnerability in audio devices can be exploited to spy on users
  45. Facebook wants to look at your entire camera roll for “AI restyling” suggestions, and more

June 2025

  1. Corpse-eating selfies, and other ways to trick scammers (Lock and Code S06E13)
  2. AT&T to pay compensation to data breach victims. Here’s how to check if you were affected
  3. Android threats rise sharply, with mobile malware jumping by 151% since start of year
  4. A week in security (June 23 – June 29)
  5. Fake DocuSign email hides tricky phishing attempt
  6. Jailbroken AIs are helping cybercriminals to hone their craft
  7. Why the Do Not Call Registry doesn’t work
  8. Facial recognition: Where and how you can opt out
  9. Many data brokers are failing to register with state consumer protection agencies
  10. Sextortion email scammers increase their “Hello pervert” money demands
  11. Thousands of private camera feeds found online. Make sure yours isn’t one of them
  12. Gmail’s multi-factor authentication bypassed by hackers to pull off targeted attacks
  13. A week in security (June 15 – June 21)
  14. Billions of logins for Apple, Google, Facebook, Telegram, and more found exposed online
  15. Mattel’s going to make AI-powered toys, kids’ rights advocates are worried
  16. Fake bank ads on Instagram scam victims out of money
  17. 5 riskiest places to get scammed online
  18. Scammers hijack websites of Bank of America, Netflix, Microsoft, and more to insert fake phone number
  19. WhatsApp to start targeting you with ads
  20. Smart air fryers ordered to stop invading our digital privacy
  21. Reddit’s new AI-powered tools scan your posts to serve you better ads
  22. The data on denying social media for kids (re-air) (Lock and Code S06E12)
  23. A week in security (June 9 – June 15)
  24. Your Meta AI chats might be public, and it’s not a bug
  25. US airline industry quietly selling flight data to DHS
  26. 23andMe raked by Congress on privacy, sale of genetic data
  27. GirlsDoPorn owner faces life in jail after pleading guilty to sex trafficking
  28. 44% of people encounter a mobile scam every single day, Malwarebytes finds
  29. Google bug allowed phone number of almost any user to be discovered
  30. How and where to report an online scam
  31. Been scammed online? Here’s what to do
  32. A week in security (June 1 – June 7)
  33. How to update Chrome on every operating system
  34. OpenAI forced to preserve ChatGPT chats
  35. Booking.com reservation abused as cybercriminals steal from travelers
  36. Pornhub, RedTube, and YouPorn block access in France, VPN use set to soar
  37. Ransomware hiding in fake AI, business tools
  38. Google fixes another actively exploited vulnerability in Chrome, so update now!
  39. Scammers are constantly changing the game, but so are we. Introducing Malwarebytes Scam Guard
  40. The North Face warns customers about potentially stolen data
  41. Juice jacking warnings are back, with a new twist
  42. Victims risk AsyncRAT infection after being redirected to fake Booking.com sites
  43. A week in security (May 26 – June 1)
  44. What does Facebook know about me? (Lock and Code S06E11)

May 2025

  1. Porn sites probed for allegedly failing to prevent minors from accessing content
  2. Take back control of your browser—Malwarebytes Browser Guard now blocks search hijacking attempts
  3. Deepfake-posting man faces huge $450,000 fine
  4. Fake AI video generator tools lure in Facebook and LinkedIn users to deliver malware
  5. New warning issued over toll fee scams
  6. 184 million logins for Instagram, Roblox, Facebook, Snapchat, and more exposed online
  7. A week in security (May 19 – May 25)
  8. Lumma information stealer infrastructure disrupted
  9. Stalkerware apps go dark after data breach
  10. Scammers are using AI to impersonate senior officials, warns FBI
  11. 23andMe and its customers’ genetic data bought by a pharmaceutical org
  12. Malware-infected printer delivered something extra to Windows users
  13. How Los Angeles banned smartphones in schools (Lock and Code S06E10)
  14. Update your Chrome to fix serious actively exploited vulnerability
  15. A week in security (May 12 – May 18)
  16. Data broker protection rule quietly withdrawn by CFPB
  17. Meta sent cease and desist letter over AI training
  18. Google to pay $1.38 billion over privacy violations
  19. Android users bombarded with unskippable ads
  20. A week in security (May 4 – May 10)
  21. Google Chrome will use AI to block tech support scam websites
  22. Cyber criminals impersonate payroll, HR and benefits platforms to steal information and funds
  23. Tired of Google sponsored ads? So are we! That’s why we’re introducing the option to block them on iOS
  24. Passwords in the age of AI: We need to find alternatives
  25. WhatsApp hack: Meta wins payout over NSO Group spyware
  26. FBI issues warning as scammers target victims of crime
  27. “Your privacy is a promise we don’t break”: Dating app Raw exposes sensitive user data
  28. Android fixes 47 vulnerabilities, including one zero-day. Update as soon as you can!
  29. The AI chatbot cop squad is here (Lock and Code S06E09)
  30. A week in security (April 27 – May 3)
  31. On world password day, Microsoft says fewer passwords, more passkeys
  32. Apple AirPlay SDK devices at risk of takeover—make sure you update
  33. The 3 biggest cybersecurity threats to small businesses
  34. Zero-day attacks on browsers and smartphones drop, says Google

April 2025

  1. Fake Social Security Statement emails trick users into installing remote tool
  2. Digital rampage saw ex-Disney employee remove nut allergy info from menus, dox co-workers, and more
  3. What privacy? Perplexity wants your data, builds browser to track you and serve ads
  4. Employee monitoring app exposes users, leaks 21+ million screenshots
  5. A week in security (April 21 – April 27)
  6. AI is getting “creepy good” at geo-guessing
  7. Zoom attack tricks victims into allowing remote access to install malware and steal money
  8. Android malware turns phones into malicious tap-to-pay machines
  9. 4.7 million customers’ data accidentally leaked to Google by Blue Shield of California
  10. Shopify faces privacy lawsuit for collecting customer data
  11. All Gmail users at risk from clever replay attack
  12. A week in security (April 12 – April 18)
  13. Did DOGE “breach” Americans’ data? (Lock and Code S06E08)
  14. Text scams grow to steal hundreds of millions of dollars
  15. Apple patches security vulnerabilities in iOS and iPadOS. Update now!
  16. Hi, robot: Half of all internet traffic now automated
  17. “I sent you an email from your email account,” sextortion scam claims
  18. “Follow me” to this fake crypto exchange to claim $500
  19. Hertz data breach caused by CL0P ransomware attack on vendor
  20. Meta slurps up EU user data for AI training
  21. No, it’s not OK to delete that new inetpub folder
  22. Malwarebytes named “Best Antivirus Software” and “Best Malware Removal Service”
  23. A week in security (April 7 – April 13)
  24. The Pall Mall Pact and why it matters
  25. Child predators are lurking on dating apps, warns report
  26. Your 23andMe genetic data could be bought by China, senator warns
  27. WhatsApp for Windows vulnerable to attacks. Update now!
  28. Man accused of using keylogger to spy on colleagues, log in to their personal accounts and watch them at home
  29. 72% of people are worried their data is being misused by the government, and that’s not all…
  30. Tax deadline threat: QuickBooks phishing scam exploits Google Ads
  31. Google AI taken for a ride by April Fools’ Day joke
  32. Google fixes two actively exploited zero-day vulnerabilities in Android
  33. Is your phone listening to you? (Lock and Code S06E07)
  34. Toll fee scams are back and heading your way
  35. A week in security (March 31 – April 6)
  36. Flaw in Verizon call record requests put millions of Americans at risk
  37. Popular VPNs are routing traffic via Chinese companies, including one with link to military
  38. QR codes sent in attachments are the new favorite for phishers
  39. Location, name, and photos of random kids shown to parents in child tracker mix up
  40. “Nudify” deepfakes stored unprotected online
  41. “Urgent reminder” tax scam wants to phish your Microsoft credentials
  42. Intimate images from kink and LGBTQ+ dating apps left exposed online

March 2025

  1. Why we’re no longer doing April Fools’ Day
  2. A week in security (March 24 – March 30)
  3. Vulnerability in most browsers abused in targeted attacks
  4. “This fraud destroyed my life.” Man ends up with criminal record after ID was stolen
  5. Moving from WhatsApp to Signal: A good idea?
  6. Security expert Troy Hunt hit by phishing attack
  7. Booking.com phish uses fake CAPTCHAs to trick hotel staff into downloading malware
  8. DeepSeek users targeted with fake sponsored Google ads that deliver malware
  9. 23andMe bankruptcy: How to delete your data and stay safe from the 2023 breach
  10. Oops! Google accidentally deletes some users’ Maps Timeline data
  11. A week in security (March 17 – March 23)
  12. What Google Chrome knows about you, with Carey Parker (Lock and Code S06E06)
  13. Personal data revealed in released JFK files
  14. Semrush impersonation scam hits Google Ads
  15. Targeted spyware and why it’s a concern to us
  16. The “free money” trap: How scammers exploit financial anxiety
  17. Sperm bank breach deposits data into hands of cybercriminals
  18. AMOS and Lumma stealers actively spread to Reddit users
  19. Amazon disables privacy option, will send your Echo voice recordings to the cloud
  20. Warning over free online file converters that actually install malware
  21. 1 in 10 people do nothing to stay secure and private on vacation
  22. A week in security (March 10 – March 16)
  23. Research on iOS apps shows widespread exposure of secrets
  24. Don’t let your kids on Roblox if you’re not comfortable, says Roblox CEO
  25. Update your iPhone now: Apple patches vulnerability used in “extremely sophisticated attacks”
  26. The dark side of sports betting: How mirror sites help gambling scams thrive
  27. Android devices track you before you even sign in
  28. X users report login troubles as Dark Storm claims cyberattack
  29. How ads weirdly know your screen brightness, headphone jack use, and location, with Tim Shott (Lock and Code S06E05)
  30. Fake CAPTCHA websites hijack your clipboard to install information stealers
  31. A week in security (March 3 – March 9)
  32. Malwarebytes Premium Security awarded “Product of the Year” from AVLab
  33. Reddit will start warning users that upvote violent content
  34. Ransomware threat mailed in letters to business owners
  35. Android botnet BadBox largely disrupted
  36. I spoke to a task scammer. Here’s how it went
  37. Android zero-day vulnerabilities actively abused. Update as soon as you can
  38. PayPal scam abuses Docusign API to spread phishy emails
  39. TikTok: Major investigation launched into platform’s use of children’s data
  40. A week in security (February 24 – March 2)

February 2025

  1. Millions of stalkerware users exposed again
  2. PayPal’s “no-code checkout” abused by scammers
  3. Countries and companies are fighting at the expense of our data privacy
  4. Roblox called “real-life nightmare for children” as Roblox and Discord sued
  5. Android happy to check your nudes before you forward them
  6. Background check provider data breach affects 3 million people who may not have heard of the company
  7. Predatory app downloaded 100,000 times from Google Play Store steals data, uses it for blackmail
  8. Surveillance pricing is “evil and sinister,” explains Justin Kloczko (Lock and Code S06E04)
  9. A week in security (February 17 – February 23)
  10. Healthcare security lapses keep piling up
  11. SecTopRAT bundled in Chrome installer distributed via Google Ads
  12. Google Docs used by infostealer ACRStealer as part of attack
  13. DeepSeek found to be sharing user data with TikTok parent company ByteDance
  14. Malwarebytes introduces native ARM support for Windows devices
  15. Google now allows digital fingerprinting of its users
  16. Macs targeted by infostealers in new era of cyberthreats
  17. Hard drives containing sensitive medical data found in flea market
  18. A week in security (February 10 – February 16)
  19. 12 Million Zacks accounts leaked by cybercriminal
  20. How AI was used in an advanced phishing campaign targeting Gmail users
  21. Fake Etsy invoice scam tricks sellers into sharing credit card information
  22. Gambling firms are secretly sharing your data with Facebook
  23. Apple fixes zero-day vulnerability used in “extremely sophisticated attack”
  24. Phishing evolves beyond email to become latest Android app threat
  25. Apple ordered to grant access to users’ encrypted data
  26. A suicide reveals the lonely side of AI chatbots, with Courtney Brown (Lock and Code S06E03)
  27. A week in security (February 3 – February 9)
  28. 20 million OpenAI accounts offered for sale
  29. New scams could abuse brief USPS suspension of inbound packages from China, Hong Kong
  30. University site cloned to evade ad detection distributes fake Cisco installer
  31. Small business owners, secure your web shop
  32. Valley News Live exposed more than a million job seeker’s resumes
  33. New AI “agents” could hold people for ransom in 2025
  34. WhatsApp says Paragon is spying on specific users
  35. A week in security (January 27 – February 2)

January 2025

  1. ClickFix vs. traditional download in new DarkGate campaign
  2. Cybercrime gets a few punches on the nose
  3. Microsoft advertisers phished via malicious Google ads
  4. The DeepSeek controversy: Authorities ask where does the data come from and how safe is it?
  5. These are the 10 worst PIN codes
  6. Apple users: Update your devices now to patch zero-day vulnerability
  7. UnitedHealth almost doubles victim numbers from massive Change Healthcare data breach
  8. A week in security (January 20 – January 26)
  9. Three privacy rules for 2025 (Lock and Code S06E02)
  10. Texas scrutinizes four more car manufacturers on privacy issues (updated)
  11. Warning: Don’t sell or buy a second hand iPhone with TikTok already installed
  12. 7-Zip bug could allow a bypass of a Windows security feature. Update now
  13. AI tool GeoSpy analyzes images and identifies locations in seconds
  14. Your location or browsing habits could lead to price increases when buying online
  15. A week in security (January 13 – January 19)
  16. WhatsApp spear phishing campaign uses QR codes to add device
  17. Avery had credit card skimmer stuck on its site for months
  18. PlugX malware deleted from thousands of systems by FBI
  19. The great Google Ads heist: criminals ransack advertiser accounts via fake Google ads
  20. Insurance company accused of using secret software to illegally collect and sell location data on millions of Americans
  21. The new rules for AI and encrypted messaging, with Mallory Knodel (Lock and Code S06E01)
  22. iMessage text gets recipient to disable phishing protection so they can be phished
  23. A week in security (January 6 – January 12)
  24. BayMark Health Services sends breach notifications after ransomware attack
  25. Google Chrome AI extensions deliver info-stealing malware in broad attack
  26. Massive breach at location data seller: “Millions” of users affected
  27. GroupGreeting e-card site attacked in “zqxq” campaign
  28. US Cyber Trust Mark logo for smart devices is coming
  29. AI-supported spear phishing fools more than 50% of targets
  30. Dental group lied through teeth about data breach, fined $350,000
  31. Some weeks in security (December 16 – January 5)
  32. “Can you try a game I made?” Fake game sites lead to information stealers

← 2023–2024