ALL POSTS December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices Pieter Arntz December 10, 2025 0 Comments The update patches three zero-days and introduces a new PowerShell warning meant to help you avoid accidentally running unsafe code from the web. GhostFrame phishing kit fuels widespread attacks against millions Pieter Arntz December 10, 2025 0 Comments GhostFrame uses dynamic subdomains and hidden iframes to help attackers slip past basic security tools. Prompt injection is a problem that may never be fixed, warns NCSC Pieter Arntz December 9, 2025 0 Comments The NCSC warns that prompt injection is unlikely to be mitigated in the same way SQL injection was. How do they compare? EU fines X $140m, tied to verification rules that make impostor scams easier Danny Bradbury December 9, 2025 0 Comments The core problem persists: anyone can still buy a 'verified' checkmark from X, so don't take their authenticity for granted. Deepfakes, AI resumes, and the growing threat of fake applicants mverburgh December 9, 2025 0 Comments Attackers are blending automation, impersonation, and social engineering to get inside organizations. Here’s how to spot the signs. How phishers hide banking scams behind free Cloudflare Pages Pieter Arntz December 8, 2025 0 Comments We found a campaign that hosts fake login pages on Cloudflare Pages and sends the stolen info straight to Telegram. Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI Pieter Arntz December 8, 2025 0 Comments Family photos pulled from social media are being used as "proof-of-life" in virtual kidnapping scams, the FBI warns. A week in security (December 1 – December 7) Malwarebytes Labs December 8, 2025 0 Comments A list of topics we covered in the week of December 1 to December 7 of 2025 Leaks show Intellexa burning zero-days to keep Predator spyware running Pieter Arntz December 5, 2025 0 Comments A fresh investigation uncovers how Predator spyware still reaches victims through high-priced, newly bought zero-days. Previous 1 2 3 4 5 … 593 Next Contributors Threat Center Podcast Glossary Scams