The update patches three zero-days and introduces a new PowerShell warning meant to help you avoid accidentally running unsafe code from the web. This article has been indexed from Malwarebytes Read the original article: December Patch Tuesday fixes three zero-days,…
Category: Malwarebytes
GhostFrame phishing kit fuels widespread attacks against millions
GhostFrame uses dynamic subdomains and hidden iframes to help attackers slip past basic security tools. This article has been indexed from Malwarebytes Read the original article: GhostFrame phishing kit fuels widespread attacks against millions
Prompt injection is a problem that may never be fixed, warns NCSC
The NCSC warns that prompt injection is unlikely to be mitigated in the same way SQL injection was. How do they compare? This article has been indexed from Malwarebytes Read the original article: Prompt injection is a problem that may…
EU fines X $140m, tied to verification rules that make impostor scams easier
The core problem persists: anyone can still buy a ‘verified’ checkmark from X, so don’t take their authenticity for granted. This article has been indexed from Malwarebytes Read the original article: EU fines X $140m, tied to verification rules that…
Deepfakes, AI resumes, and the growing threat of fake applicants
Attackers are blending automation, impersonation, and social engineering to get inside organizations. Here’s how to spot the signs. This article has been indexed from Malwarebytes Read the original article: Deepfakes, AI resumes, and the growing threat of fake applicants
How phishers hide banking scams behind free Cloudflare Pages
We found a campaign that hosts fake login pages on Cloudflare Pages and sends the stolen info straight to Telegram. This article has been indexed from Malwarebytes Read the original article: How phishers hide banking scams behind free Cloudflare Pages
Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI
Family photos pulled from social media are being used as “proof-of-life” in virtual kidnapping scams, the FBI warns. This article has been indexed from Malwarebytes Read the original article: Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI
A week in security (December 1 – December 7)
A list of topics we covered in the week of December 1 to December 7 of 2025 This article has been indexed from Malwarebytes Read the original article: A week in security (December 1 – December 7)
Leaks show Intellexa burning zero-days to keep Predator spyware running
A fresh investigation uncovers how Predator spyware still reaches victims through high-priced, newly bought zero-days. This article has been indexed from Malwarebytes Read the original article: Leaks show Intellexa burning zero-days to keep Predator spyware running
How scammers use fake insurance texts to steal your identity
We follow the trail of a simple insurance text scam to show how it can spiral into full-blown identity theft. This article has been indexed from Malwarebytes Read the original article: How scammers use fake insurance texts to steal your…
Canadian police trialing facial recognition bodycams
Facial recognition software has long been criticized for accuracy issues and past wrongful arrests. This article has been indexed from Malwarebytes Read the original article: Canadian police trialing facial recognition bodycams
Canadian police trialling facial recognition bodycams
Facial recognition software has long been criticized for accuracy issues and past wrongful arrests. This article has been indexed from Malwarebytes Read the original article: Canadian police trialling facial recognition bodycams
Update Chrome now: Google fixes 13 security issues affecting billions
Google has pushed out a Chrome update with 13 security fixes, including a high-severity flaw in Digital Credentials. This article has been indexed from Malwarebytes Read the original article: Update Chrome now: Google fixes 13 security issues affecting billions
Attackers have a new way to slip past your MFA
Attackers are using a tool called Evilginx to steal session cookies, letting them bypass the need for a multi-factor authentication (MFA) token. This article has been indexed from Malwarebytes Read the original article: Attackers have a new way to slip…
How attackers use real IT tools to take over your computer
We’ve seen a new wave of attacks exploiting legitimate Remote Monitoring and Management (RMM) tools to remotely control victims’ systems. This article has been indexed from Malwarebytes Read the original article: How attackers use real IT tools to take over…
Fileless protection explained: Blocking the invisible threat others miss
Your antivirus scans files. But what about attacks that never create files? Here’s how we catch the threats hiding on your family’s computers. This article has been indexed from Malwarebytes Read the original article: Fileless protection explained: Blocking the invisible…
“Sleeper” browser extensions woke up as spyware on 4 million devices
After seven years of acting like normal add-ons, five popular Chrome and Edge extensions with millions of installs suddenly turned malicious. This article has been indexed from Malwarebytes Read the original article: “Sleeper” browser extensions woke up as spyware on…
Air fryer app caught asking for voice data (re-air) (Lock and Code S06E24)
This week on the Lock and Code podcast, we revisit three stories about smart devices that want to collect more data than people may know. This article has been indexed from Malwarebytes Read the original article: Air fryer app caught…
Whispering poetry at AI can make it break its own rules
Malicious prompts rewritten as poems have been found to bypass AI guardrails. Which models resisted and which failed the poetic jailbreak test? This article has been indexed from Malwarebytes Read the original article: Whispering poetry at AI can make it…
Google patches 107 Android flaws, including two being actively exploited
Google’s December update fixes two Android bugs that criminals are actively exploiting. Update as soon as you can. This article has been indexed from Malwarebytes Read the original article: Google patches 107 Android flaws, including two being actively exploited