Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Data breaches Resident Evil maker Capcom warns of phishing after 11.7 million records exposed October 23, 2026 – Exposed email addresses could put CAPCOM ID users at risk of phishing. Passwords were also changed without permission on 196 accounts. Data breaches Crime Stoppers chapter freezes tips after breach breaks anonymity promise News Delivery bots accused of illegally scanning customers Bugs PHP2Shell: Why many websites had to go offline for emergency security updates Scams Fake Amazon Music x YouTube deal lures creators into a Google login trap Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Choose your WhatsApp username carefully Pieter Arntz July 6, 2026 0 Comments WhatsApp is introducing usernames to help protect your phone number. Just make sure you don't undermine that privacy by choosing the wrong one. NetNut botnet takes a hit. Don’t be part of the next one. Pieter Arntz July 6, 2026 0 Comments Google, the FBI, and other partners have disrupted a residential proxy network built on millions of hijacked devices and used by criminals. A week in security (June 29 – July 5) Malwarebytes Labs July 6, 2026 0 Comments A list of topics we covered in the week of June 29 to July 5 of 2026 Verified X ad spreads Mac malware, while ConsentFix steals Microsoft accounts Pieter Arntz July 3, 2026 0 Comments Two new campaigns show how cybercriminals are increasingly relying on social engineering instead of software exploits to compromise devices and accounts. Apple’s Hide My Email doesn’t hide it very well Pieter Arntz July 2, 2026 0 Comments A year ago a researcher found a vulnerability in Apple's Hide My Email feature and now he's tired of waiting for a fix. Fake Google and Cloudflare verification pages spread multiple malware families Gabriele Orini July 2, 2026 0 Comments We uncovered ClickFix attacks using fake Google and Cloudflare pages to deliver everything from infostealers to a newly discovered malware loader. WinRAR flaw could allow attackers to take control of your computer Pieter Arntz July 2, 2026 0 Comments A new WinRAR update fixes a serious security flaw, but without automatic updates many users could miss the patch. Fake Perplexity Chrome extension spies on your searches Danny Bradbury July 1, 2026 0 Comments A fake Perplexity Chrome extension secretly monitored searches. If you installed "Search for perplexity ai," you need to remove it manually. BioShocking: when “gaming” AI agents is no longer a game Pieter Arntz July 1, 2026 0 Comments Researchers warned AI vendors about a proof-of-concept called BioShiocking that tricks agents by gamifying the outcome. Previous 1 … 28 29 30 31 32 … 661 Next Contributors Threat Center Podcast Glossary Scams