Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Bugs Update Chrome now: Google fixes 13 security issues affecting billions December 4, 2025 – Google has pushed out a Chrome update with 13 security fixes, including a high-severity flaw in Digital Credentials. News Canadian police trialing facial recognition bodycams News Attackers have a new way to slip past MFA in educational orgs News “Sleeper” browser extensions woke up as spyware on 4 million devices Mobile Google patches 107 Android flaws, including two being actively exploited Threat Intelligence Threat Intel Stay up to date with the latest research and threat intelligence reports. READ MORE BUSINESS BLOG Business Discover the tools, insights, and advice you need to protect your organization. EXPLORE PERSONAL BLOG Personal Get the security news and tips to help you and your family stay safe. EXPLORE PODCAST Podcast Our bi-weekly podcast of the latest security headlines and in-depth interviews with guests VIEW EPISODES How scammers use fake insurance texts to steal your identity Pieter Arntz December 4, 2025 0 Comments We follow the trail of a simple insurance text scam to show how it can spiral into full-blown identity theft. Canadian police trialing facial recognition bodycams Danny Bradbury December 4, 2025 0 Comments Facial recognition software has long been criticized for accuracy issues and past wrongful arrests. Update Chrome now: Google fixes 13 security issues affecting billions Pieter Arntz December 4, 2025 0 Comments Google has pushed out a Chrome update with 13 security fixes, including a high-severity flaw in Digital Credentials. Attackers have a new way to slip past MFA in educational orgs Pieter Arntz December 3, 2025 0 Comments Researchers are seeing a rise in Evilginx to steal session cookies, letting them bypass the need for a multi-factor authentication (MFA) token among educational institutions. How attackers use real IT tools to take over your computer Pieter Arntz December 3, 2025 0 Comments We’ve seen a new wave of attacks exploiting legitimate Remote Monitoring and Management (RMM) tools to remotely control victims’ systems. Fileless protection explained: Blocking the invisible threat others miss Malwarebytes Core Technology December 3, 2025 0 Comments Your antivirus scans files. But what about attacks that never create files? Here's how we catch the threats hiding on your family's computers. “Sleeper” browser extensions woke up as spyware on 4 million devices Pieter Arntz December 2, 2025 0 Comments After seven years of acting like normal add-ons, five popular Chrome and Edge extensions with millions of installs suddenly turned malicious. Air fryer app caught asking for voice data (re-air) (Lock and Code S06E24) Malwarebytes Labs December 2, 2025 0 Comments This week on the Lock and Code podcast, we revisit three stories about smart devices that want to collect more data than people may know. Whispering poetry at AI can make it break its own rules Danny Bradbury December 2, 2025 0 Comments Malicious prompts rewritten as poems have been found to bypass AI guardrails. Which models resisted and which failed the poetic jailbreak test? 1 2 3 … 590 Next Contributors Threat Center Podcast Glossary Scams
