Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Data breaches ShinyHunters escalates Canvas attacks with school login defacements May 8, 2026 – Days after the first attack, ShinyHunters is applying pressure with ransom messages on school login portals. News Microsoft says Edge’s plaintext password behavior is “by design” AI Massive AI investment scam network spans 15,500 domains Family and parenting If a fake moustache can fool age checks, is the Online Safety Act working? Data breaches Millions of students’ personal data stolen in major education breach PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Microsoft says Edge’s plaintext password behavior is “by design” Pieter Arntz May 8, 2026 0 Comments A researcher found Edge loads saved passwords into computer memory when it starts, making them easier to steal if a device is already compromised. ShinyHunters escalates Canvas attacks with school login defacements Pieter Arntz May 8, 2026 0 Comments Days after the first attack, ShinyHunters is applying pressure with ransom messages on school login portals. Massive AI investment scam network spans 15,500 domains Pieter Arntz May 7, 2026 0 Comments AI investment scammers abused the Keitaro ad-tracking platform to cloak their campaign, exposing it only to likely targets. If a fake moustache can fool age checks, is the Online Safety Act working? Pieter Arntz May 7, 2026 0 Comments A UK report finds some progress since the Act came into force, but widespread workarounds, ongoing harm, and unresolved privacy concerns suggest the impact is still limited. Google Chrome’s silent 4GB AI download problem Pieter Arntz May 6, 2026 0 Comments Google Chrome writes a 4GB AI model to users’ devices without asking, and reinstalls it if you delete it. Attackers adopt JavaScript runtime Bun to spread NWHStealer Gabriele Orini May 6, 2026 0 Comments A legitimate developer tool is being repurposed by attackers to package and spread this Windows infostealer in harder-to-detect ways. Millions of students’ personal data stolen in major education breach Pieter Arntz May 6, 2026 0 Comments ShinyHunters claims it stole personal data from 275 million users on Instructure’s Canvas platform across schools and education providers. Update WhatsApp now: Two new flaws could expose you to malicious files Pieter Arntz May 5, 2026 0 Comments WhatsApp patches flaws that could expose users to malicious content and disguised malware. Cyberattacks are raising your prices (Lock and Code S07E09) Malwarebytes Labs May 4, 2026 0 Comments This week on the Lock and Code podcast, we speak with Eva Velasquez about small business cyberattacks and the "cyber tax" coming for us all. 1 2 3 … 620 Next Contributors Threat Center Podcast Glossary Scams
