Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Bugs July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days July 15, 2026 – Microsoft's July 2026 Patch Tuesday sets yet another record, fixing 622 Microsoft CVEs—three times as many as last month. AI Claude for Chrome flaw could let rogue extensions access your Gmail News This fake Apple app can unlock your Mac’s password vault News The inside job that cost ransomware victims millions News Warning: Scammers are using FaceTime to empty bank accounts Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Claude for Chrome flaw could let rogue extensions access your Gmail Pieter Arntz July 15, 2026 0 Comments The ClaudeBleed vulnerability still lets malicious Chrome extensions abuse Claude for Chrome's permissions. July 2026 Patch Tuesday fixes 622 Microsoft CVEs, including three zero-days Pieter Arntz July 15, 2026 0 Comments Microsoft's July 2026 Patch Tuesday sets yet another record, fixing 622 Microsoft CVEs—three times as many as last month. This fake Apple app can unlock your Mac’s password vault Pieter Arntz July 15, 2026 0 Comments Disguised as Apple's CrashReporter, CrashStealer steals passwords, browser data, crypto wallets, and other sensitive information. Warning: Scammers are using FaceTime to empty bank accounts Pieter Arntz July 14, 2026 0 Comments Cybercriminals are combining social engineering through apps like FaceTime with unpatched devices to steal credentials and drain bank accounts. The inside job that cost ransomware victims millions Danny Bradbury July 14, 2026 0 Comments Instead of helping victims negotiate with BlackCat, a trusted ransomware negotiator secretly helped the gang extort them. Trusting your kids online isn’t enough (Lock and Code S07E14) Malwarebytes Labs July 13, 2026 0 Comments This week on the Lock and Code podcast, we speak with Anna Brading about what actually works in keeping her kids safe online. Ghostcommit attack hides malicious AI instructions in images Pieter Arntz July 13, 2026 0 Comments A proof-of-concept attack hides prompt injection in a PNG file, turning routine code reviews into a path for secret theft. Fake crypto gift card sites are getting harder to spot Stefan Dasic July 13, 2026 0 Comments Scam crypto gift card stores look almost identical to the real thing. One wrong click can leave you with no card and no way to get your money back. A week in security (July 6 – July 12) Malwarebytes Labs July 13, 2026 0 Comments A list of topics we covered in the week of July 6 to July 12 of 2026 1 2 3 … 635 Next Contributors Threat Center Podcast Glossary Scams
