Malwarebytes Labs – The Security Blog From Malwarebytes | Malwarebytes Labs AI The fake sites using a cheap toolkit to sell $2,000 AI subscriptions September 21, 2026 – More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions. AI Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor AI Researchers used Claude to hack OpenAI AI Gemini’s breach of real companies exposes an AI guardrail problem News ShinyHunters hacks rival extortion gang and takes over its dark web site Podcast Listen to the latest in cybersecurity and privacy. VIEW EPISODES AI Find out the newest developments in AI. READ MORE Data breaches Keep on top of the latest data breach news. READ MORE Threat Intel Stay up to date with our latest research. READ MORE Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor Pieter Arntz September 22, 2026 0 Comments A simple terminal command can hijack Muse and use its extensive permissions to spy on Mac users and control their connected accounts. Researchers used Claude to hack OpenAI Danny Bradbury September 22, 2026 0 Comments Claude helped researchers break into OpenAI in under 72 hours, and exposed how quickly AI is lowering the bar for sophisticated hacking. The AI plot to scan and destroy books (Lock and Code S07E19) Malwarebytes Labs September 21, 2026 0 Comments This week on the Lock and Code podcast, we speak with Emanuel Maiberg about Amazon's effort to scan and destroy rare books for AI training. The fake sites using a cheap toolkit to sell $2,000 AI subscriptions Stefan Dasic September 21, 2026 0 Comments More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions. Gemini’s breach of real companies exposes an AI guardrail problem Pieter Arntz September 21, 2026 0 Comments Gemini crossed the boundaries of a capture-the-flag test and accessed systems belonging to three real companies. ShinyHunters hacks rival extortion gang and takes over its dark web site Pieter Arntz September 21, 2026 0 Comments Hackers hacked the hackers as a feud between two cybercrime groups escalated, leaving ShinyHunters with the upper hand over rival Clop. A week in security (September 14 – September 20) Malwarebytes Labs September 21, 2026 0 Comments A list of topics we covered in the week of September 14 to September 20 of 2026 New Android malware uses AI to steal bank logins and PINs Pieter Arntz September 18, 2026 0 Comments RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs. Did an AI really try to break free from human control? Pieter Arntz September 18, 2026 0 Comments An unreleased OpenAI model wrote instructions telling itself to ignore developer controls. Here’s what actually happened. 1 2 3 … 653 Next Contributors Threat Center Podcast Glossary Scams
