Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Scams Fake iPhone Duo preorder scam triggers DarkSword attack September 29, 2026 – A fake iPhone Duo preorder page promises a $500 voucher. Open it on a vulnerable iPhone, and it tries to break in before you fill out the form. AI Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home AI Humans are reviewing Copilot users’ bizarre and abusive image-editing requests Bugs Update your iPhone, iPad, or Mac: Flaw could run attackers’ code AI OpenAI pauses work on top AI models after agent slips past internet controls Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home Pieter Arntz September 29, 2026 0 Comments A buyer chatted and negotiated with Muse, which shared the seller’s address and arranged a pickup. The seller knew nothing about it. Update your iPhone, iPad, or Mac: Flaw could run attackers’ code Pieter Arntz September 29, 2026 0 Comments A malicious file could trigger the vulnerability. Apple says it may already have been used against iPhone users. Fake iPhone Duo preorder scam triggers DarkSword attack Stefan Dasic September 29, 2026 0 Comments A fake iPhone Duo preorder page promises a $500 voucher. Open it on a vulnerable iPhone, and it tries to break in before you fill out the form. Humans are reviewing Copilot users’ bizarre and abusive image-editing requests Danny Bradbury September 29, 2026 0 Comments Copilot users asked for upskirt images and sexualized edits of people in uploaded photos. Human contractors were asked to judge the results. OpenAI pauses work on top AI models after agent slips past internet controls Pieter Arntz September 28, 2026 0 Comments An OpenAI agent bypassed internet restrictions and kept running after an alert. It's another case of AI misalignment no one can afford to ignore. FBI agents’ blood tests and doctors’ notes surface after breach Pieter Arntz September 28, 2026 0 Comments A “shellfish and banana allergy” is among the details in medical records hackers showed reporters. They claim to hold records on thousands of FBI staff. A week in security (September 21 – September 27) Malwarebytes Labs September 28, 2026 0 Comments A list of topics we covered in the week of September 21 to September 27 of 2026 LinkedIn adds new checks for fake profiles and work histories Pieter Arntz September 25, 2026 0 Comments The platform is adding new checks as AI makes profiles easier to forge. But scammers can still invent a company to recruit for. Kothamine malware uses Tailscale’s tailcat to evade network detection Gabriele Orini September 25, 2026 0 Comments Kothamine uses a legitimate Tailscale tool to receive attackers’ commands through an encrypted connection with no malicious domain to block. 1 2 3 … 655 Next Contributors Threat Center Podcast Glossary Scams
