Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs News MikroTik router flaws allow takeover without a password September 8, 2026 – Attackers are exploiting critical RouterOS flaws to take control of routers with SSH exposed to the internet. News LG TV flaws could let attackers listen in, even in standby mode AI Flirty OnlyFans promoters on X may be using AI to appear human News Free streaming boxes may be routing criminal traffic through your home News 153M+ driver’s licenses for sale on new dark web platform Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE MikroTik router flaws allow takeover without a password Pieter Arntz September 8, 2026 0 Comments Attackers are exploiting critical RouterOS flaws to take control of routers with SSH exposed to the internet. Loyalty points fraud is funding hacker holidays (Lock and Code S07E18) Malwarebytes Labs September 7, 2026 0 Comments This week on the Lock and Code podcast, we speak with Kim Sutherland about loyalty points fraud and how everyday people can stay safe. LG TV flaws could let attackers listen in, even in standby mode Pieter Arntz September 7, 2026 0 Comments Testing found that LG smart TVs can track viewing and scan home networks, while security flaws could let attackers record conversations. Flirty OnlyFans promoters on X may be using AI to appear human Pieter Arntz September 7, 2026 0 Comments Personalized replies and voice notes make it increasingly difficult to tell whether you’re talking to a human, chatbot, or AI agent. A week in security (August 31 – September 6) Malwarebytes Labs September 7, 2026 0 Comments Last week on Malwarebytes Labs: Stay safe! The hidden work of modernizing Malwarebytes Anna Tukhtarova September 4, 2026 0 Comments Why disciplined dependency modernization is one of the highest-leverage engineering investments a security product can make. X Money rollout linked to password-reset attacks Pieter Arntz September 4, 2026 0 Comments As X expands into payments, users are receiving password-reset emails they didn’t request. Here’s what may be happening and how to stay safe. Free streaming boxes may be routing criminal traffic through your home Pieter Arntz September 4, 2026 0 Comments Researchers found that apps available on SuperBox devices could add your household connection to a residential proxy network. StreamRat Android malware spreads through Meta and TikTok ads Pieter Arntz September 3, 2026 0 Comments Social media ads for a free streaming service exposed roughly 570,000 people to StreamRat, a banking Trojan that can take control of infected phones. 1 2 3 … 649 Next Contributors Threat Center Podcast Glossary Scams