Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Mobile High-severity Qualcomm bug hits Android devices in targeted attacks March 4, 2026 – Google has patched 129 Android vulnerabilities, including an actively exploited flaw in a widely used Qualcomm component. News Does the UK really want to ban VPNs? And can it be done? AI Chrome flaw let extensions hijack Gemini’s camera, mic, and file access AI Pentagon ditches Anthropic AI over “security risk” and OpenAI takes over Threat Intel A fake FileZilla site hosts a malicious download PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE A week in security (December 22 – December 28) Malwarebytes Labs December 29, 2025 0 Comments A list of topics we covered in the week of December 22 to December 28 of 2025 Hacktivists claim near-total Spotify music scrape Pieter Arntz December 23, 2025 0 Comments Hacktivists have scraped almost 100% of the content available on Spotify. Is there anything users need to worry about? Pornhub tells users to expect sextortion emails after data exposure Pieter Arntz December 22, 2025 0 Comments Users affected by the data breach may be contacted directly by cybercriminals, Pornhub warns. A week in security (December 15 – December 21) Malwarebytes Labs December 22, 2025 0 Comments A list of topics we covered in the week of December 15 to December 21 of 2025 CISA warns ASUS Live Update backdoor is still exploitable, seven years on Pieter Arntz December 19, 2025 0 Comments Seven years after the original attack, CISA has added the ASUS Live Update backdoor to its Known Exploited Vulnerabilities catalog. The ghosts of WhatsApp: How GhostPairing hijacks accounts Pieter Arntz December 18, 2025 0 Comments Criminals are tricking WhatsApp users into linking an attacker’s browser to their account using fake login pages and routine-looking prompts. Chrome extension slurps up AI chats after users installed it for privacy Danny Bradbury December 18, 2025 0 Comments The extension disclosed its AI data collection, but not in a way most users would recognize—or knowingly agree to. Two Chrome flaws could be triggered by simply browsing the web: Update now Pieter Arntz December 17, 2025 0 Comments Google's patched two flaws in Chrome, both of which can be triggered remotely when a user loads specially crafted web content. Inside a purchase order PDF phishing campaign Pieter Arntz December 17, 2025 0 Comments A “purchase order” PDF blocked by Malwarebytes led to a credential-harvesting phishing site. So we analyzed the attack and where the data went next. Previous 1 … 12 13 14 15 16 … 606 Next Contributors Threat Center Podcast Glossary Scams
