Anthropic has warned that infostealers are stealing Claude session cookies to access users’ accounts and consume usage at their expense.
Category: Malwarebytes
McKesson confirms cyber incident after ShinyHunters claims patient-data theft
Healthcare company McKesson acknowledged a data breach. ShinyHunters claims to have stolen hundred of millions of records
A week in security (August 24 – August 30)
A list of topics we covered in the week of August 24 to August 30 of 2026
Protect your WhatsApp account with new passkey and 2FA upgrades
WhatsApp has introduced three security upgrades. Here’s what to turn on to better protect your account.
The AI agent swarm that attacked Hugging Face is a warning for the future
An army of AI agents was responsible for the Hugging Face incident. What does it mean for the future of AI?
Flock wants privacy to meet surveillance halfway
Flock’s CEO wants a compromise between privacy and public safety, but the public has already compromised enough.
Fake listings can turn trusted platforms into scam springboards
A trusted name on a trusted platform does not guarantee a trustworthy listing. It could still lead to a tech support scammer.
Fake Apple Pay charge brings the classic tech support scam to your phone
Built for mobile users, this tech support scam uses a fake Apple Pay alert and browser tricks to pressure victims into calling a scam number.
New Instagram and Facebook rules set a default two-hour limit for teens
Meta will pay up to $17 billion and introduce new protections for US teens to settle a landmark child safety case.
Update Chrome before you browse again
Chrome’s latest update fixes 327 security vulnerabilities, including some that malicious websites could exploit as soon as you visit them.
Popular school apps may be sharing student data with advertisers
A Utah investigation found educational apps collecting unauthorized student data and sharing information with third parties and advertisers.
Beware of fake Indeed interview apps used to install spyware
Scammers are posing as employers on Indeed to trick job seekers into installing fake Android interview apps that deliver malware.
Grok fooled into stealing user chat, location data, and more
Researchers found that prompt injection attacks can hide malicious instructions in encrypted text to get them past AI guardrails.
Encrypted instructions can fool AI assistants like Grok and Gemini
Researchers found that prompt injection attacks can hide malicious instructions in encrypted text to get them past AI guardrails.
GTA 6 leak hunt could expose data belonging to thousands of Discord users
Take-Two is demanding IP addresses, phone numbers, device IDs, and other data as it tries to identify whoever leaked GTA 6 footage.
TikTok phishing: How to spot fake login and verification pages
Scammers use fake TikTok login pages, warnings, and verification offers to trick you into handing over your account details.
Fake GTA 6 Extended Look and demo sites deliver an infostealer
Bogus “Play Now” sites are exploiting the GTA 6 leak hype to spread malware that steals passwords stored in browsers.
What happens to your data when you die? (Lock and Code S07E17)
This week on the Lock and Code podcast, we speak with Tamara Kneese about the many ways your data remains long after your die.
Fake Microsoft security scans trick victims into uninstalling their antivirus
We found fake Microsoft-branded scanners that invent security problems, tell victims to uninstall AV, and then steer them into a refund scam.
Your data doesn’t die when you do (Lock and Code S07E17)
This week on the Lock and Code podcast, we speak with Tamara Kneese about the many ways your data remains long after your die.