Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs News Vatican’s Click To Pray app exposed personal data from 700,000 users July 28, 2026 – Anyone could access other Click To Pray users' personal information. The flaw went unfixed for more than six months after it was reported. Mobile Aftercall ads are driving Android users crazy News Sextortion scammers are exploiting ShinyHunters data leaks Scams Call of Duty Mobile scam uses fake free points to steal player accounts Bugs July Apple updates are especially important if you receive images Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE July Apple updates are especially important if you receive images Pieter Arntz July 28, 2026 0 Comments Apple issued a large July security update with several image processing related vulnerabilities that could compromise your device. Vatican’s Click To Pray app exposed personal data from 700,000 users Danny Bradbury July 28, 2026 0 Comments Anyone could access other Click To Pray users' personal information. The flaw went unfixed for more than six months after it was reported. Aftercall ads are driving Android users crazy Pieter Arntz July 27, 2026 0 Comments A newly uncovered ad fraud campaign is spreading Android apps that display full-screen ads every time you end a phone call. Sextortion scammers are exploiting ShinyHunters data leaks Pieter Arntz July 27, 2026 0 Comments Scammers are posing as ShinyHunters and using leaked email addresses to make their sextortion emails seem more credible. What’s your data worth on the dark web? (Lock and Code S07E15) Malwarebytes Labs July 27, 2026 0 Comments This week on the Lock and Code podcast, we discuss just exactly why it is that hackers and scammers want your data—and how you're at risk. A week in security (July 20 – July 26) Malwarebytes Labs July 27, 2026 0 Comments A list of topics we covered in the week of July 20 to July 26 of 2026 Don’t get fooled by TikTok resin art scams Pieter Arntz July 24, 2026 0 Comments Scammers are using stolen videos and fake artist profiles to trick people into buying resin art that never arrives. Here's how to spot the warning signs. Call of Duty Mobile scam uses fake free points to steal player accounts Stefan Dasic July 24, 2026 0 Comments A phishing site posing as a free Call of Duty Points giveaway is stealing Activision logins and two-factor authentication codes. OpenAI’s agent escaped its sandbox during a security test Pieter Arntz July 24, 2026 0 Comments An OpenAI agent escaped its sandbox, stole credentials, and broke into Hugging Face. Here's what that actually means. 1 2 3 … 638 Next Contributors Threat Center Podcast Glossary Scams