A list of topics we covered in the week of October 19 to October 25 of 2026
Category: Malwarebytes
Facebook’s misleading privacy claims land Meta a $25 billion penalty
Users were misled about who could access their personal information on Facebook. Now Meta has been ordered to pay $25 billion.
Fake Amazon Music x YouTube deal lures creators into a Google login trap
A convincing “creator portal” uses your own YouTube videos and viewing figures to steal your Google login.
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
One in three people now tune out scam warnings, and scammers are counting on it.
Woman faces years in prison over a Cash App account she says she never opened
A woman faces up to six years in prison over a Cash App account she says someone opened using her stolen identity.
PHP2Shell: Why many websites had to go offline
Many sites were taken offline so admins could patch two critical PHP flaws that could have let attackers run malicious code on their servers.
Delivery bots accused of illegally scanning customers
Two lawsuits allege delivery robots scanned customers’ faces without consent, linked scans to names and addresses, and used them to train AI.
Signal bug could let someone keep listening after you hang up
A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the latest fixes.
Resident Evil maker Capcom warns of phishing after 11.7 million records exposed
Exposed email addresses could put CAPCOM ID users at risk of phishing. Passwords were also changed without permission on 196 accounts.
Crime Stoppers chapter freezes tips after breach breaks anonymity promise
A Crime Stoppers chapter has stopped accepting tips after a breach exposed information about anonymous tipsters.
WhatsApp’s chatbot was given hidden instructions to not mention privacy regulators
Hidden instructions told WhatsApp’s chatbot not to suggest privacy regulators to users struggling to delete their accounts.
Meta glasses caught recording conversations without wake phrase
Owners reported unexpected recordings of private conversations, but Meta hasn’t explained what went wrong or what happened to the audio.
Man seeking love travels 2,000 km to meet an AI-generated woman
An influencer’s invitation to join her on a farm shows how public videos can feel dangerously personal.
Facebook’s misleading privacy claims land Meta a $25 billion penalty
Users were misled about who could access their personal information on Facebook. Now Meta has been ordered to pay $25 billion.
PHP2Shell: Why many websites had to go offline for emergency security updates
Websites are temporarily going offline as admins address two critical PHP flaws that could let attackers run malicious code on their servers.
Scammers are finding new ways to target your phone. Here are 5 ways to protect yourself
One in three people now tune out scam warnings, and scammers are counting on it.
Fake Amazon Music x YouTube deal lures creators into a Google login trap
A convincing “creator portal” uses your own YouTube videos and viewing figures to steal your Google login.
Woman faces years in prison over a Cash App account she says she never opened
A woman faces up to six years in prison over a Cash App account she says someone opened using her stolen identity.
Signal bug could let someone keep listening after you hang up
A flaw in Signal’s calling library could let another participant keep hearing you after you hang up. Update your app to get the latest fixes.
Delivery bots accused of illegally scanning customers
Two lawsuits allege delivery robots scanned customers’ faces without consent, linked scans to names and addresses, and used them to train AI.