ShinyHunters claims to have stolen millions of records from Match Group dating apps and Panera Bread, with very different consequences for users. This article has been indexed from Malwarebytes Read the original article: Match, Hinge, OkCupid, and Panera Bread breached…
Tag: Malwarebytes
TikTok’s privacy update mentions immigration status. Here’s why.
TikTok updated its privacy policy to mention immigration status, sparking backlash—but the reality is more complicated. This article has been indexed from Malwarebytes Read the original article: TikTok’s privacy update mentions immigration status. Here’s why.
Meta confirms it’s working on premium subscription for its apps
Details are currently thin, but one thing is clear: paying more is unlikely to buy users meaningful privacy or less tracking. This article has been indexed from Malwarebytes Read the original article: Meta confirms it’s working on premium subscription for…
Microsoft Office zero-day lets malicious documents slip past security checks
Microsoft issued an emergency patch for a flaw attackers are using to slip malicious code past Office’s document security checks. This article has been indexed from Malwarebytes Read the original article: Microsoft Office zero-day lets malicious documents slip past security…
Clawdbot’s rename to Moltbot sparks impersonation campaign
This Moltbot impersonation campaign is a case study in supply-chain risk, brand hijacking, and what happens when open source goes viral. This article has been indexed from Malwarebytes Read the original article: Clawdbot’s rename to Moltbot sparks impersonation campaign
Malicious Chrome extensions can spy on your ChatGPT chats
Researchers found 16 malicious browser extensions that can quietly hijack active ChatGPT sessions and siphon user data. This article has been indexed from Malwarebytes Read the original article: Malicious Chrome extensions can spy on your ChatGPT chats
WhatsApp rolls out new protections against advanced exploits and spyware
WhatsApp is strengthening how it handles photos and videos, and introducing Strict Account Settings to limit risky messages from unknown senders. This article has been indexed from Malwarebytes Read the original article: WhatsApp rolls out new protections against advanced exploits…
Watch out for AT&T rewards phishing text that wants your personal details
Recently, we uncovered a realistic, multi-layered data theft phishing campaign targeting AT&T customers. This article has been indexed from Malwarebytes Read the original article: Watch out for AT&T rewards phishing text that wants your personal details
A WhatsApp bug lets malicious media files spread through group chats
Google’s Project Zero team found that WhatsApp can download a malicious media file without you doing anything at all. This article has been indexed from Malwarebytes Read the original article: A WhatsApp bug lets malicious media files spread through group…
TikTok narrowly avoids a US ban by spinning up a new American joint venture
TikTok may have avoided a ban, but it didn’t become a different company overnight. Like any other social network, assume your data matters, and share accordingly. This article has been indexed from Malwarebytes Read the original article: TikTok narrowly avoids…
Get paid to scroll TikTok? The data trade behind Freecash ads
Ads promised up to $35 an hour to watch videos. Instead, users were funneled into mobile games designed to drive spending and collect data. This article has been indexed from Malwarebytes Read the original article: Get paid to scroll TikTok?…
One privacy change I made for 2026 (Lock and Code S07E02)
This week on the Lock and Code podcast, host David Ruiz explains why he’s leaving behind Google Search… and what he’s replacing it with. This article has been indexed from Malwarebytes Read the original article: One privacy change I made…
A week in security (January 19 – January 25)
A list of topics we covered in the week of January 19 to January 25 of 2026 This article has been indexed from Malwarebytes Read the original article: A week in security (January 19 – January 25)
Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?
Spammers are abusing Zendesk to flood inboxes with emails from trusted brands. There’s no phishing or malware—just noise. This article has been indexed from Malwarebytes Read the original article: Spammers abuse Zendesk to flood inboxes with legitimate-looking emails, but why?
Fake LastPass maintenance emails target users
LastPass is warning users about phishing emails that pressure users to back up their vaults within 24 hours. This article has been indexed from Malwarebytes Read the original article: Fake LastPass maintenance emails target users
Under Armour ransomware breach: data of 72 million customers appears on the dark web
Customer data allegedly stolen during a ransomware attack on sportswear giant Under Armour is now circulating on the dark web. This article has been indexed from Malwarebytes Read the original article: Under Armour ransomware breach: data of 72 million customers…
Can you use too many LOLBins to drop some RATs?
An attempt to drop two RATs on a system used an uncanny assortment of legitimate Windows tools. This article has been indexed from Malwarebytes Read the original article: Can you use too many LOLBins to drop some RATs?
Malicious Google Calendar invites could expose private data
Researchers showed how prompt injection hidden in a calendar invite can bypass privacy controls and turn an AI assistant into a data-leaking accomplice. This article has been indexed from Malwarebytes Read the original article: Malicious Google Calendar invites could expose…
Fake extension crashes browsers to trick users into infecting themselves
A fake ad blocker crashes your browser, then uses ClickFix tricks to make you run the malware yourself. This article has been indexed from Malwarebytes Read the original article: Fake extension crashes browsers to trick users into infecting themselves
Google will pay $8.25m to settle child data-tracking allegations
Google-owned AdMob allegedly collected kids’ data for ads without parental consent—including IP addresses, usage data, and exact locations. This article has been indexed from Malwarebytes Read the original article: Google will pay $8.25m to settle child data-tracking allegations