Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Bugs WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw July 23, 2026 – HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. Bugs Millions of cars could be tracked and unlocked by a hidden security flaw Data breaches Chick-fil-A loyalty accounts hijacked using stolen passwords Data breaches Paidwork breach exposes data of 23 million users: Check if you’re affected Bugs What happens if you visit a WordPress site hacked through wp2shell? Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Millions of cars could be tracked and unlocked by a hidden security flaw Danny Bradbury July 23, 2026 0 Comments A hidden flaw in a dealer-installed car alarm could let attackers unlock vehicles and track their locations. Many owners don't know they have one. WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw Pieter Arntz July 23, 2026 0 Comments HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. Chick-fil-A loyalty accounts hijacked using stolen passwords Pieter Arntz July 22, 2026 0 Comments If you have a Chick-fil-A One account, now is a good time to change your password—and make sure it's one you don't use anywhere else. Paidwork breach exposes data of 23 million users: Check if you’re affected Pieter Arntz July 22, 2026 0 Comments A reported breach at microtask platform Paidwork exposed personal and financial data of more than 23 million users. Here's how to check if you're affected. What happens if you visit a WordPress site hacked through wp2shell? Pieter Arntz July 21, 2026 0 Comments Attackers started exploiting the critical wp2shell vulnerability chain within hours of patches being released, putting sites and their visitors at risk. New ClickLock Stealer locks your Mac until you hand over your password Pieter Arntz July 21, 2026 0 Comments A new macOS infostealer tricks victims into revealing their system password and installs a persistent backdoor for future access. Don’t trust that “FBI agent” in your DMs Pieter Arntz July 21, 2026 0 Comments The FBI is warning that fraudsters are using fake IC3 accounts and direct messages to target people who've already been scammed. AI nudify apps spark legal scrutiny of Apple and Google’s profits Danny Bradbury July 21, 2026 0 Comments Instead of fighting over what app stores host, the San Francisco City Attorney is targeting how they make money from AI nudify apps. The Odyssey piracy scams appear within hours of the movie’s release Stefan Dasic July 20, 2026 0 Comments The release of The Odyssey has already sparked a wave of piracy scams, from fake browser errors to malware masquerading as movie files. 1 2 3 … 637 Next Contributors Threat Center Podcast Glossary Scams
