Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Bugs WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw July 23, 2026 – HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. Bugs Millions of cars could be tracked and unlocked by a hidden security flaw Data breaches Chick-fil-A loyalty accounts hijacked using stolen passwords Data breaches Paidwork breach exposes data of 23 million users: Check if you’re affected Bugs What happens if you visit a WordPress site hacked through wp2shell? Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Why Malwarebytes blocks some Yahoo Mail redirects Pieter Arntz May 14, 2026 0 Comments Some Yahoo Mail users may see repeated Malwarebytes alerts caused by background connections to suspicious third-party domains. Here’s why. Deepfake sextortion forces schools to remove student photos from websites Danny Bradbury May 14, 2026 0 Comments Experts are urging schools to take down identifiable photos of students, after AI deepfakes have led to sextortion cases at UK schools. Texas sued Netflix over claims it secretly collected and sold users’ data Pieter Arntz May 13, 2026 0 Comments The Texas AG sued Netflix, accusing the company of secretly tracking viewers, selling user data, and using addictive features targeted at minors. May 2026 Patch Tuesday: no zero-days but plenty to fix Pieter Arntz May 13, 2026 0 Comments May’s Patch Tuesday may not be the giant release many expected, but there are still plenty of important fixes that shouldn’t be ignored. Fake Claude search results lure Mac users into ClickFix attack Pieter Arntz May 12, 2026 0 Comments Researchers found a ClickFix campaign that uses fake Claude setup guides to trick Mac users into infecting themselves. 1 in 8 employees have sold company logins or know someone who has Danny Bradbury May 12, 2026 0 Comments Cifas just published research that should bother anyone who runs a business, or buys from one. Stolen Canvas data was “returned” after hacker agreement, Instructure says Pieter Arntz May 12, 2026 0 Comments Instructure says the stolen Canvas data impacting millions of students and staff was “returned.” That’s not how breaches work. Yarbo responds to robot flaws that could mow down their owners Pieter Arntz May 11, 2026 0 Comments A researcher found a host of vulnerabilities in Yarbo garden robots that could expose Wi-Fi passwords, hijack cameras, and run over their owners on command. A week in security (May 4 – May 10) Malwarebytes Labs May 11, 2026 0 Comments A list of topics we covered in the week of May 4 to May 10 of 2026 Previous 1 … 15 16 17 18 19 … 637 Next Contributors Threat Center Podcast Glossary Scams
