March 2026

Researchers published about the Zombie ZIP vulnerability (or not a vulnerability, that’s up for debate) that can bypass a first AV inspection.

When you delete a file, it’s not really gone. We explain what really happens to deleted files and how File Shredder erases them for good.

A list of topics we covered in the week of March 9 to March 15 of 2026

Scammers are sending fake calendar “renewal” notices impersonating Malwarebytes to trick victims into calling a fake billing number.

Google has released an out-of-band Chrome update to patch two zero-day vulnerabilities that are already being actively exploited.

A fake $TEMU crypto airdrop uses the ClickFix trick to make victims run malware themselves and quietly installs a remote-access backdoor.

Apple issued security updates for older iOS and iPadOS versions to close vulnerabilities exploited by the Coruna exploit kit.

Researchers showed how attackers could pull encryption keys, recover the PIN, and access sensitive data from affected devices.

A bug in Microsoft Authenticator on Android and iOS could allow malicious apps on the same device to intercept authentication codes or sign-in links.

New AI-powered protections aim to detect impersonation attempts, suspicious friend requests, and scam messages.