Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs News Password managers keep your passwords safe, unless… February 23, 2026 – Researchers investigated the zero-knowledge claims of password managers—and found some possible attack scenarios. Scams Fake Huorong security site infects users with ValleyRAT News Age verification vendor Persona left frontend exposed, researchers say AI Meta patents AI that could keep you posting from beyond the grave Scams Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Password managers keep your passwords safe, unless… Pieter Arntz February 23, 2026 0 Comments Researchers investigated the zero-knowledge claims of password managers—and found some possible attack scenarios. Fake Huorong security site infects users with ValleyRAT Stefan Dasic February 23, 2026 0 Comments One extra letter in the domain is all it takes to hand over remote control of your system. A week in security (February 16 – February 22) Malwarebytes Labs February 23, 2026 0 Comments A list of topics we covered in the week of February 16 to February 22 of 2026 What can’t you say on TikTok? Malwarebytes Labs February 22, 2026 0 Comments This week on the Lock and Code podcast, we speak with Zach Hinkle and MinJi Pae about TikTok's new American ownership—and it's new rules. Age verification vendor Persona left frontend exposed, researchers say Pieter Arntz February 20, 2026 0 Comments Behind a basic age check, researchers say Persona’s system runs extensive identity, watchlist, and adverse-media screening. Facebook ads spread fake Windows 11 downloads that steal passwords and crypto wallets Stefan Dasic February 20, 2026 0 Comments Attackers are weaponizing Facebook ads to distribute password-stealing malware masked as a Windows download. AI-generated passwords are a security risk Pieter Arntz February 19, 2026 0 Comments AI-generated passwords are "highly predictable" and aren’t truly random, making them easier for cybercriminals to crack. Intimate products maker Tenga spilled customer data Pieter Arntz February 19, 2026 0 Comments A phishing attack on a Tenga employee may have exposed US customer data. Customers should watch for sextortion-themed phishing attempts. Meta patents AI that could keep you posting from beyond the grave Danny Bradbury February 19, 2026 0 Comments Hopefully Meta really will file this in the "just because we can do it doesn't mean we should" drawer. 1 2 3 … 604 Next Contributors Threat Center Podcast Glossary Scams
