Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Bugs WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw July 23, 2026 – HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. Bugs Millions of cars could be tracked and unlocked by a hidden security flaw Data breaches Chick-fil-A loyalty accounts hijacked using stolen passwords Data breaches Paidwork breach exposes data of 23 million users: Check if you’re affected Bugs What happens if you visit a WordPress site hacked through wp2shell? Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Google wants to store a selfie video of your face Pieter Arntz July 24, 2026 0 Comments A new selfie video verification feature could make recovering your Google Account easier. But it also creates new security and privacy concerns. Beyond the Play Store: How Android threats really spread Artur Mikhnovskiy July 24, 2026 0 Comments Some threats never pass through the Play Store. Others arrive later in seemingly legitimate updates. Here's how Malwarebytes detects both. Millions of cars could be tracked and unlocked by a hidden security flaw Danny Bradbury July 23, 2026 0 Comments A hidden flaw in a dealer-installed car alarm could let attackers unlock vehicles and track their locations. Many owners don't know they have one. WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw Pieter Arntz July 23, 2026 0 Comments HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. Chick-fil-A loyalty accounts hijacked using stolen passwords Pieter Arntz July 22, 2026 0 Comments If you have a Chick-fil-A One account, now is a good time to change your password—and make sure it's one you don't use anywhere else. Paidwork breach exposes data of 23 million users: Check if you’re affected Pieter Arntz July 22, 2026 0 Comments A reported breach at microtask platform Paidwork exposed personal and financial data of more than 23 million users. Here's how to check if you're affected. What happens if you visit a WordPress site hacked through wp2shell? Pieter Arntz July 21, 2026 0 Comments Attackers started exploiting the critical wp2shell vulnerability chain within hours of patches being released, putting sites and their visitors at risk. New ClickLock Stealer locks your Mac until you hand over your password Pieter Arntz July 21, 2026 0 Comments A new macOS infostealer tricks victims into revealing their system password and installs a persistent backdoor for future access. Don’t trust that “FBI agent” in your DMs Pieter Arntz July 21, 2026 0 Comments The FBI is warning that fraudsters are using fake IC3 accounts and direct messages to target people who've already been scammed. 1 2 3 … 637 Next Contributors Threat Center Podcast Glossary Scams
