Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Scams That “job brief” on Google Forms could infect your device March 20, 2026 – Fake job offers on Google Forms are spreading PureHVNC malware that can take over your device. News Could your face change what you pay? NYC wants limits on biometric tracking Privacy Your tax forms sell for $20 on the dark web Mobile A DarkSword hangs over unpatched iPhones Privacy 90% of people don’t trust AI with their data PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE A week in security (March 16 – March 22) Malwarebytes Labs March 23, 2026 0 Comments A list of topics we covered in the week of March 16 to March 22 of 2026 This is all it takes to stop a train (Lock and Code S07E06) Malwarebytes Labs March 22, 2026 0 Comments This week on the Lock and Code podcast, we speak with Rachel Swan about the simple network problems causing major train outages in the Bay. Could your face change what you pay? NYC wants limits on biometric tracking Pieter Arntz March 20, 2026 0 Comments NYC lawmakers are pushing to rein in biometric tracking before it turns into real-world surveillance pricing and customer profiling. That “job brief” on Google Forms could infect your device Gabriele Orini March 20, 2026 0 Comments Fake job offers on Google Forms are spreading PureHVNC malware that can take over your device. A DarkSword hangs over unpatched iPhones Pieter Arntz March 19, 2026 0 Comments Researchers have identified multiple state-level attacks using DarkSword, a chain of vulnerabilities, to infect unpatched iPhones. Your tax forms sell for $20 on the dark web Malwarebytes Labs March 19, 2026 0 Comments Tax season is also peak season for identity theft. Malwarebytes researchers spotted criminals trading stolen tax records on dark web forums. Researchers found font-rendering trick to hide malicious commands Pieter Arntz March 18, 2026 0 Comments Researchers found a way to trick AI assistants into missing dangerous user instructions on a website. Apple patches WebKit bug that could let sites access your data Pieter Arntz March 18, 2026 0 Comments Apple has released a Background Security Improvement that silently fixes a WebKit vulnerability (CVE-2026-20643). Inside a network of 20,000+ fake shops Stefan Dasic March 18, 2026 0 Comments A sprawling network of fake shops, all built for one purpose: to steal your payment details and personal data. 1 2 3 … 611 Next Contributors Threat Center Podcast Glossary Scams