Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs AI OpenAI agent breached Australian government site, took months to report it September 24, 2026 – The agent was looking for public spending data. It found a way into non-public files instead. What do we need to change to stop this from happening? Product New Browser Guard features add protection before and after you click Bugs Update Chrome: 108 security fixes for desktop, new release for Android News Google’s location data privacy failures draw a €403 million fine How to How device code phishing gives scammers access to your account Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE OpenAI agent breached Australian government site, took months to report it Pieter Arntz September 24, 2026 0 Comments The agent was looking for public spending data. It found a way into non-public files instead. What do we need to change to stop this from happening? New Browser Guard features add protection before and after you click Malwarebytes Labs September 24, 2026 0 Comments Spot dangerous sites before you click—and check for scams once you’re there. Update Chrome: 108 security fixes for desktop, new release for Android Pieter Arntz September 24, 2026 0 Comments Google has released Chrome 154 for desktop and begun rolling out Chrome 155 for Android. Here’s what to check on your device. Google’s location data privacy failures draw a €403 million fine Danny Bradbury September 24, 2026 0 Comments Turning off Location History did not necessarily stop Google from recording where users went. Ireland’s privacy regulator has now fined the company €403 million. How device code phishing gives scammers access to your account Pieter Arntz September 23, 2026 0 Comments A scammer asks you to enter a code to open a file or join a meeting. Approving it could sign them in to your account instead. Fake Claude Max giveaway hides a Google account phishing trap Stefan Dasic September 23, 2026 0 Comments A convincing offer of a free Claude Max subscription uses a fake browser window to steal Google login information. ShinyHunters claims FBI breach was revenge for “false” report Pieter Arntz September 23, 2026 0 Comments The extortion group says it stole sensitive data on FBI agents and job applicants, and wants the bureau to retract a warning about its tactics. Some cheap smart glasses are a security disaster Pieter Arntz September 22, 2026 0 Comments Tests found that some cheap smart glasses can be hijacked over Bluetooth, exposing their owners’ photos, videos, and personal data. Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor Pieter Arntz September 22, 2026 0 Comments A simple terminal command can hijack Muse and use its extensive permissions to spy on Mac users and control their connected accounts. 1 2 3 … 654 Next Contributors Threat Center Podcast Glossary Scams
