Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs Bugs WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw July 23, 2026 – HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. Bugs Millions of cars could be tracked and unlocked by a hidden security flaw Data breaches Chick-fil-A loyalty accounts hijacked using stolen passwords Data breaches Paidwork breach exposes data of 23 million users: Check if you’re affected Bugs What happens if you visit a WordPress site hacked through wp2shell? Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Don’t get fooled by TikTok resin art scams Pieter Arntz July 24, 2026 0 Comments Scammers are using stolen videos and fake artist profiles to trick people into buying resin art that never arrives. Here's how to spot the warning signs. Call of Duty Mobile scam uses fake free points to steal player accounts Stefan Dasic July 24, 2026 0 Comments A phishing site posing as a free Call of Duty Points giveaway is stealing Activision logins and two-factor authentication codes. OpenAI’s agent escaped its sandbox during a security test Pieter Arntz July 24, 2026 0 Comments An OpenAI agent escaped its sandbox, stole credentials, and broke into Hugging Face. Here's what that actually means. Google wants to store a selfie video of your face Pieter Arntz July 24, 2026 0 Comments A new selfie video verification feature could make recovering your Google Account easier. But it also creates new security and privacy concerns. Beyond the Play Store: How Android threats really spread Artur Mikhnovskiy July 24, 2026 0 Comments Some threats never pass through the Play Store. Others arrive later in seemingly legitimate updates. Here's how Malwarebytes detects both. Millions of cars could be tracked and unlocked by a hidden security flaw Danny Bradbury July 23, 2026 0 Comments A hidden flaw in a dealer-installed car alarm could let attackers unlock vehicles and track their locations. Many owners don't know they have one. WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw Pieter Arntz July 23, 2026 0 Comments HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users. Chick-fil-A loyalty accounts hijacked using stolen passwords Pieter Arntz July 22, 2026 0 Comments If you have a Chick-fil-A One account, now is a good time to change your password—and make sure it's one you don't use anywhere else. Paidwork breach exposes data of 23 million users: Check if you’re affected Pieter Arntz July 22, 2026 0 Comments A reported breach at microtask platform Paidwork exposed personal and financial data of more than 23 million users. Here's how to check if you're affected. 1 2 3 … 637 Next Contributors Threat Center Podcast Glossary Scams
