Malwarebytes
@malwarebytes.com
All-in-one cybersecurity that's always by your side https://www.malwarebytes.com/
This isn't the carbonara you top with Pecorino Romano. It's a new attack that steals Google Sync passkeys, and it's guaranteed to leave a bitter taste. https://bit.ly/45GW0f2
Google’s synchronized passkeys can be stolen in 'Pass‑ta‑key' attacks
Researchers found three attack vectors in which malware could steal Google synced passkeys from a Windows machine
malwarebytes.com
Russian cybercrime groups are running a campaign that abuses public hotel Wi-Fi networks to steal information from travelers worldwide. Read the latest. https://bit.ly/4g7d5ot
Travelers targeted when logging into hotel Wi-Fi networks
Russian cybercrime groups are running a campaign that abuses hospitality Wi-Fi to steal information from travelers worldwide
malwarebytes.com
Google launched an AI image feature in Google Earth, and the internet immediately did what the internet does best: deepfakes. The feature was rolled back less than 24 hours later. https://bit.ly/4w3tX44
Online backlash ends in Google rolling back Google Earth AI tool after a day
Google has walked back an AI feature that allowed users to generate artificial images inside Google Earth, after a predictable flurry of deepfakes.
malwarebytes.com
Our malware scanner for Android just got a fresh new look. What do you think? 👀
As of August 2nd, the EU is enforcing key parts of the AI Act, regulating chatbots, deepfakes and other consumer‑facing AI systems.
The AI Act kicks into action, forces companies to be clear about AI chatbots
The EU has started to enforce the AI Act which gives law enforcement a more modern legal bases to go after nudifiers and CSAM
malwarebytes.com
Scammers are using fake V-Bucks offers to hijack Fortnite accounts. If you or your child entered your Epic login details on one of these sites, change the password immediately, turn on 2FA, and don’t reuse that password on any other accounts.
Fake Fortnite rewards are stealing players' accounts
Scammers are using fake V-Bucks offers and locker value sites to hijack Fortnite accounts.
malwarebytes.com
Malwarebytes is now available directly from the Microsoft Store, making it easier than ever to install trusted all-in-one protection against malware, scams, and more. Read more. 👇
Malwarebytes for Windows, now available on the Microsoft Store
Install Malwarebytes for Windows from the Microsoft Store with the same full protection and features.
malwarebytes.com
Things you should trust in 2026: ✅ Your seatbelt ✅ Two-factor authentication ❌ "Install Flash Player"
Fake Flash Player installs AtlasRAT
Researchers have uncovered a new campaign that spreads the AtlasRAT remote access Trojan by disguising it as a Flash Player installer.
malwarebytes.com
WhatsApp Web chats were exposed by an Adobe Acrobat extension flaw. Here's what you need to know. https://www.malwarebytes.com/blog/news/2026/07/whatsapp-web-chats-exposed-by-adobes-acrobat-extension-flaw?utm_campaign=brandsocial&utm_medium=social&utm_source=bluesky
The FTC alleges that Hims & Hers shared consumers’ sensitive health information with third‑party advertising platforms despite promising strong privacy protections.
Hims & Hers sued over alleged health data privacy failures
The FTC has sued telehealth provider Hims & Hers, alleging it shared customers' sensitive health information with advertisers.
malwarebytes.com
A new type of attack can trick Microsoft Copilot for Word into spreading hidden prompt injections.
Hidden prompt turns Microsoft Copilot into an AI worm
A new type of attack can trick Microsoft Copilot for Word into spreading hidden prompt injections from document to document.
malwarebytes.com
Three users lost $1.8 million after downloading a fake Sparrow Wallet app from Apple's App Store, despite the real developer warning Apple it wasn't legitimate. https://bit.ly/4woyNdk
Apple accused of letting fake crypto app steal $1.8 million
The case raises fresh questions about how effectively Apple polices apps that impersonate legitimate developers.
bit.ly
Nearly half of people encounter a scam on their phone every single day. Malwarebytes is doing something about it. Here’s how Malwarebytes Mobile Security helps keep scams away from you and your data.
We rebuilt Malwarebytes Mobile Security for the scams of today
Your phone needs more than a lock screen to stay safe. We've rebuilt Malwarebytes Mobile Security to put scam protection first and keep your phone secure.
malwarebytes.com
Robocalls were already annoying. Now AI is making them worse.
AI robocalls: Why caller ID is still lying to you
AI is making robocall scams cheaper, more convincing, and harder to spot. Here's why caller ID still isn't enough.
malwarebytes.com
This is your reminder that clicking the “share” button on an AI chat allowing search engines to discover the resulting URL, making the contents of the chat show up in search results.
Shared Claude chats were searchable on Google
Reddit users found that by using a specific search query, they could find shared Claude conversations in search results.
malwarebytes.com
🚨 Apple's latest security update patches multiple vulnerabilities tied to image processing. In some attacks, simply opening a malicious image could give attackers a way into your device.
Update your iPhone, iPad and Mac to fix Apple security holes
Apple issued a large July security update with several image processing related vulnerabilities that could compromise your device.
malwarebytes.com
🎙️ NEW PODCAST EPISODE This week on the Lock and Code podcast, host David Ruiz explains how a screenshot of your house from Google Maps became a tool in extortion emails, and why the most benign information about you—an address, an age, one public photo—is the most useful data a stranger can buy.
What's your data worth on the dark web? (Lock and Code S07E15)
This week on the Lock and Code podcast, we discuss just exactly why it is that hackers and scammers want your data—and how you're at risk.
malwarebytes.com
The call ends. The ads begin. Aftercall is annoying Android users. https://www.malwarebytes.com/blog/news/2026/07/aftercall-ads-are-driving-android-users-crazy?utm_campaign=brandsocial&utm_medium=social&utm_source=bluesky
Aftercall ads are driving Android users crazy
A newly uncovered ad fraud campaign is spreading Android apps that display full-screen ads every time you end a phone call.
malwarebytes.com
A new wave of sextortion scams uses leaked email data (linked to ShinyHunters) to appear legit. The claims of hacked devices and recordings are false: no compromise, no proof, just pressure tactics to get you to pay. https://bit.ly/45rpg9s
Sextortion scammers are exploiting ShinyHunters data leaks
Scammers are posing as ShinyHunters and using leaked email addresses to make their sextortion emails seem more credible.
malwarebytes.com
Call of Duty: Mobile players, beware. A new phishing scam is offering 10,800 free CP to trick you into handing over your Activision login and your 2FA code. Once attackers have those, they can take over your account, access linked gaming profiles, and stored payment methods.
Scammers are using AI-generated videos that tug at your heartstrings, like these mesmerizing "resin artists" overcoming impossible odds, to build trust, go viral, and convince people to buy products that never arrive. Learn how to detect these scams and what to watch out for.
Don't get fooled by TikTok resin art scams
Scammers are using stolen videos and fake artist profiles to trick people into buying resin art that never arrives. Here's how to spot the warning signs.
malwarebytes.com
During an internal security test, OpenAI’s AI models escaped their sandbox, accessed the internet, and reached Hugging Face infrastructure to complete their objective, highlighting the potential risks of increasingly autonomous AI systems.
OpenAI's agent escaped its sandbox during a security test
An OpenAI agent escaped its sandbox, stole credentials, and broke into Hugging Face. Here's what that actually means.
malwarebytes.com
Is using a selfie to regain access to your Android device a great idea, or are we sacrificing security and privacy for convenience? https://bit.ly/4vISThd
Google wants to store a selfie video of your face
A new selfie video verification feature could make recovering your Google Account easier. But it also creates new security and privacy concerns.
malwarebytes.com
A coding mistake in the dealer-installed KARR Security System could let attackers unlock, track, or disable millions of cars, and many owners may not even know the alarm is installed.
Millions of cars could be tracked and unlocked by a hidden security flaw
A hidden flaw in a dealer-installed car alarm could let attackers unlock vehicles and track their locations. Many owners don't know they have one.
malwarebytes.com
Adobe’s Acrobat Chrome extension flaw could let a single malicious website silently expose WhatsApp Web chats on affected browsers, and Adobe has already patched it.
WhatsApp Web chats exposed by Adobe's Acrobat extension flaw
HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users.
malwarebytes.com
Mac stealers continue to evolve. The latest, ClickLock Stealer, can render your Mac nearly unusable with relentless fake password prompts until you enter your macOS password. Once you do, it steals your data and leaves behind a persistent backdoor.
New ClickLock Stealer locks your Mac until you hand over your password
A new macOS infostealer tricks victims into revealing their system password and installs a persistent backdoor for future access.
malwarebytes.com
23M+ users exposed: Paidwork breach leaks personal and financial data, with an 11GB database from March 2026 now circulating on cybercrime forums.
Paidwork breach exposes data of 23 million users: Check if you're affected
A reported breach at microtask platform Paidwork exposed personal and financial data of more than 23 million users. Here's how to check if you're affected.
malwarebytes.com
Fast-food chain Chick-fil-A is warning customers after attackers hijacked loyalty accounts using stolen passwords in a credential stuffing attack.
Chick-fil-A loyalty accounts hijacked using stolen passwords
If you have a Chick-fil-A One account, now is a good time to change your password—and make sure it's one you don't use anywhere else.
malwarebytes.com
The wp2shell vulnerability chain is patched in WordPress core. If you're responsible for a site, don't wait to update.
What happens if you visit a WordPress site hacked through wp2shell?
Attackers started exploiting the critical wp2shell vulnerability chain within hours of patches being released, putting sites and their visitors at risk.
bit.ly
Scammers are impersonating FBI agents on social media and on messaging apps, targeting people who’ve already been victims of cybercrime.
Don't trust that "FBI agent" in your DMs
The FBI is warning that fraudsters are using fake IC3 accounts and direct messages to target people who've already been scammed.
malwarebytes.com