Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Uncategorized Photo booth flaw exposes people’s private pictures online December 16, 2025 – A security researcher says a basic website flaw at a photo booth operator may have exposed hundreds of private customer photos. News Google is discontinuing its dark web report: why it matters Podcast Pig butchering is the next “humanitarian global crisis” (Lock and Code S06E25) News PayPal closes loophole that let scammers send real emails with fake purchase notices News The US digital doxxing of H-1B applicants is a massive privacy misstep Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE BUSINESS BLOG Business Discover the tools, insights, and advice you need to protect your organization. EXPLORE PERSONAL BLOG Personal Get the security news and tips to help you and your family stay safe. EXPLORE PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES Android threats in 2025: When your phone becomes the main attack surface Pieter Arntz December 16, 2025 0 Comments Android users spent 2025 walking a tighter rope than ever, with malware, data-stealing apps, and SMS-borne scams all climbing sharply. Photo booth flaw exposes people’s private pictures online lstockley December 16, 2025 0 Comments A security researcher says a basic website flaw at a photo booth operator may have exposed hundreds of private customer photos. Google is discontinuing its dark web report: why it matters Pieter Arntz December 16, 2025 0 Comments Google will discontinue its dark web report early next year, prompting mixed reactions. How does dark web monitoring actually help keep you safe? Pig butchering is the next “humanitarian global crisis” (Lock and Code S06E25) Malwarebytes Labs December 15, 2025 0 Comments This week on the Lock and Code podcast, we speak with Erin West about pig butchering scams and the efforts to stop this new, global crisis. PayPal closes loophole that let scammers send real emails with fake purchase notices Pieter Arntz December 15, 2025 0 Comments Scammers exploited a PayPal subscriptions feature to send legitimate emails from service@paypal.com, using fake purchase notifications to push tech support scams. A week in security (December 8 – December 14) Malwarebytes Labs December 15, 2025 0 Comments A list of topics we covered in the week of December 8 to December 14 of 2025 The US digital doxxing of H-1B applicants is a massive privacy misstep Mark Beare December 12, 2025 0 Comments By making social accounts public, the new policy exposes private data that attackers can use for targeting, impersonation, or extortion. Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer Pieter Arntz December 12, 2025 0 Comments Criminals make malicious ChatGPT and Grok conversations appear at the top of common Google searches—leading users straight to the Atomic macOS Stealer. How private is your VPN? Matt Burgess December 12, 2025 0 Comments After years of trying VPNs for myself, privacy-minded family members, and a few mission-critical projects, here’s what I wish everyone knew. 1 2 3 … 592 Next Contributors Threat Center Podcast Glossary Scams