Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Bugs Actively exploited cPanel bug exposes millions of websites to takeover May 1, 2026 – A vulnerability in the cPanel/WHM admin interface lets attackers access websites without a username and password. News More PayPal emails hijacked to deliver tech support scams How to Hackers stole hundreds of thousands of Roblox accounts: Here’s what to do AI Researchers built a chatbot that only knows the world before 1931 Bugs Microsoft won’t patch PhantomRPC: Feature or bug? PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES AI AI If the robots are taking over, you'll want to know about it. READ MORE Data Breaches Data breaches Keep on top of the latest data breach news. READ MORE Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE Firefox is giving users the AI off switch Pieter Arntz February 4, 2026 0 Comments Mozilla and other companies are starting to see why giving users a choice over AI features matters. An AI plush toy exposed thousands of private chats with children Pieter Arntz February 3, 2026 0 Comments Around 50,000 chat transcripts between children and Bondu’s AI dinosaur plushie were accessible to anyone with a Google account. AT&T breach data resurfaces with new risks for customers Pieter Arntz February 3, 2026 0 Comments As leaked datasets are merged and enriched, they become more useful to criminals. That makes recycled breach data a bigger risk for customers. Apple’s new iOS setting addresses a hidden layer of location tracking Danny Bradbury February 3, 2026 0 Comments Apple has introduced Limit Precise Location, a new setting that reduces how precisely cellular networks can locate your device, though support is currently limited. [updated] A fake cloud storage alert that ends at Freecash Pieter Arntz February 3, 2026 0 Comments We followed a fake cloud storage payment alert through deceptive affiliate redirects, ending at a familiar destination: Freecash. How Manifest v3 forced us to rethink Browser Guard, and why that’s a good thing Cameron Eckelberry February 2, 2026 0 Comments Browser Guard still blocks scams and phishing like it always has. But we had to rebuild the way it does that from the ground up. Scam-checking just got easier: Malwarebytes is now in ChatGPT Malwarebytes Labs February 2, 2026 0 Comments Malwarebytes' ChatGPT integration makes it the first cybersecurity provider that can deliver its expertise without ever leaving the chat How fake party invitations are being used to install remote access tools Stefan Dasic February 2, 2026 0 Comments Fake party invitations are used to install remote access tools, so the criminals are the ones invited. A week in security (January 26 – February 1) Malwarebytes Labs February 2, 2026 0 Comments A list of topics we covered in the week of January 26 to February 1 of 2026 Previous 1 … 18 19 20 21 22 … 619 Next Contributors Threat Center Podcast Glossary Scams
