Google’s synchronized passkeys can be stolen in 'Pass‑ta‑key' attacks

Researchers found three attack vectors in which malware could steal Google synced passkeys from a Windows machine

malwarebytes.com

Apple battles it out again with the UK over encrypted iCloud access

Apple is fighting another attempt by the UK's Home Office to get a backdoor providing access to encrypted iCloud data

malwarebytes.com

Californians can tell data brokers to DROP their information

Since Augsust 1, 2026 California residents can use the centralized DROP platform to send requests to all registered data brokers

malwarebytes.com

The AI Act kicks into action, forces companies to be clear about AI chatbots

The EU has started to enforce the AI Act which gives law enforcement a more modern legal bases to go after nudifiers and CSAM

malwarebytes.com

WhatsApp account takeover scam asks you to "vote for my friend"

Scammers are trying to take over WhatsApp accounts by sending messages asking people to vote for a friend in a fake online contest.

malwarebytes.com

Fake Flash Player installs AtlasRAT

Researchers have uncovered a new campaign that spreads the AtlasRAT remote access Trojan by disguising it as a Flash Player installer.

malwarebytes.com

Hidden prompt turns Microsoft Copilot into an AI worm

A new type of attack can trick Microsoft Copilot for Word into spreading hidden prompt injections from document to document.

malwarebytes.com

Hims & Hers sued over alleged health data privacy failures

The FTC has sued telehealth provider Hims & Hers, alleging it shared customers' sensitive health information with advertisers.

malwarebytes.com

AI robocalls: Why caller ID is still lying to you

AI is making robocall scams cheaper, more convincing, and harder to spot. Here's why caller ID still isn't enough.

malwarebytes.com

Shared Claude chats were searchable on Google

Reddit users found that by using a specific search query, they could find shared Claude conversations in search results.

malwarebytes.com

July Apple updates are especially important if you receive images

Apple issued a large July security update with several image processing related vulnerabilities that could compromise your device.

malwarebytes.com

Sextortion scammers are exploiting ShinyHunters data leaks

Scammers are posing as ShinyHunters and using leaked email addresses to make their sextortion emails seem more credible.

malwarebytes.com

Aftercall ads are driving Android users crazy

A newly uncovered ad fraud campaign is spreading Android apps that display full-screen ads every time you end a phone call.

malwarebytes.com

Don't get fooled by TikTok resin art scams

Scammers are using stolen videos and fake artist profiles to trick people into buying resin art that never arrives. Here's how to spot the warning signs.

malwarebytes.com

OpenAI's agent escaped its sandbox during a security test

An OpenAI agent escaped its sandbox, stole credentials, and broke into Hugging Face. Here's what that actually means.

malwarebytes.com

Google wants to store a selfie video of your face

A new selfie video verification feature could make recovering your Google Account easier. But it also creates new security and privacy concerns.

malwarebytes.com

WhatsApp Web chats exposed by Adobe's Acrobat extension flaw

HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users.

malwarebytes.com

Paidwork breach exposes data of 23 million users: Check if you're affected

A reported breach at microtask platform Paidwork exposed personal and financial data of more than 23 million users. Here's how to check if you're affected.

malwarebytes.com

What happens if you visit a WordPress site hacked through wp2shell?

Attackers started exploiting the critical wp2shell vulnerability chain within hours of patches being released, putting sites and their visitors at risk.

malwarebytes.com

New ClickLock Stealer locks your Mac until you hand over your password

A new macOS infostealer tricks victims into revealing their system password and installs a persistent backdoor for future access.

malwarebytes.com

Don't trust that "FBI agent" in your DMs

The FBI is warning that fraudsters are using fake IC3 accounts and direct messages to target people who've already been scammed.

malwarebytes.com

Healthcare giant Abbott probes two cyber incidents amid extortion claims

Extortion groups ShinyHunters and ShadowByt3$ claim they stole vast amounts of patient data. Those allegations have not been verified.

malwarebytes.com

Shark vacuum flaw exposes cameras, home maps and Wi-Fi passwords

One compromised Shark robot vacuum could unlock remote access to many others.

malwarebytes.com

The backlash against Flock cameras is spreading

Privacy concerns have dogged Flock's automated license plate recognition system for years. Now accuracy and reliability are coming under scrutiny too.

malwarebytes.com

This fake Apple app can unlock your Mac's password vault

Disguised as Apple's CrashReporter, CrashStealer steals passwords, browser data, crypto wallets, and other sensitive information.

malwarebytes.com

Warning: Scammers are using FaceTime to empty bank accounts

Cybercriminals are combining social engineering through apps like FaceTime with unpatched devices to steal credentials and drain bank accounts.

malwarebytes.com

Ghostcommit attack hides malicious AI instructions in images

A proof-of-concept attack hides prompt injection in a PNG file, turning routine code reviews into a path for secret theft.

malwarebytes.com

Two Chrome updates in two days fix critical vulnerabilities

Chrome updates are arriving within days of each other. Learn how to update Chrome and check if you're running the latest version.

malwarebytes.com

Microsoft fixes RoguePlanet zero-day in Defender

The RoguePlanet zero-day is now fixed in Microsoft Defender. Here's how to make sure your system is protected.

malwarebytes.com

6.9 million driver’s license numbers stolen from AssuranceAmerica

Millions of AssuranceAmerica customers are being notified after attackers accessed driver's license numbers and other personal information.

malwarebytes.com