Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs News Shared Claude chats were searchable on Google July 28, 2026 – Reddit users found that by using a specific search query, they could find shared Claude conversations in search results. News Vatican’s Click To Pray app exposed personal data from 700,000 users Mobile We rebuilt Malwarebytes Mobile Security for the scams of today Bugs Update your iPhone, iPad and Mac to fix Apple security holes Mobile Aftercall ads are driving Android users crazy Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Call of Duty Mobile scam uses fake free points to steal player accounts Stefan Dasic July 24, 2026 0 Comments A phishing site posing as a free Call of Duty Points giveaway is stealing Activision logins and two-factor authentication codes. OpenAI’s agent escaped its sandbox during a security test Pieter Arntz July 24, 2026 0 Comments An OpenAI agent escaped its sandbox, stole credentials, and broke into Hugging Face. Here's what that actually means. Google wants to store a selfie video of your face Pieter Arntz July 24, 2026 0 Comments A new selfie video verification feature could make recovering your Google Account easier. But it also creates new security and privacy concerns. Beyond the Play Store: How Android threats really spread Artur Mikhnovskiy July 24, 2026 0 Comments Some threats never pass through the Play Store. Others arrive later in seemingly legitimate updates. Here's how Malwarebytes detects both. Millions of cars could be tracked and unlocked by a hidden security flaw Danny Bradbury July 23, 2026 0 Comments A hidden flaw in a dealer-installed car alarm could let attackers unlock vehicles and track their locations. Many owners don't know they have one. WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw Pieter Arntz July 23, 2026 0 Comments HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. Chick-fil-A loyalty accounts hijacked using stolen passwords Pieter Arntz July 22, 2026 0 Comments If you have a Chick-fil-A One account, now is a good time to change your password—and make sure it's one you don't use anywhere else. Paidwork breach exposes data of 23 million users: Check if you’re affected Pieter Arntz July 22, 2026 0 Comments A reported breach at microtask platform Paidwork exposed personal and financial data of more than 23 million users. Here's how to check if you're affected. What happens if you visit a WordPress site hacked through wp2shell? Pieter Arntz July 21, 2026 0 Comments Attackers started exploiting the critical wp2shell vulnerability chain within hours of patches being released, putting sites and their visitors at risk. Previous 1 2 3 4 … 638 Next Contributors Threat Center Podcast Glossary Scams
