An interview invitation becomes a trap for your Facebook and Google passwords, even with two-factor authentication turned on.
Category: Malwarebytes
Police receive fake murder tip from Anthropic’s Claude AI
Anthropic’s Claude submitted a made-up tip about an unsolved murder during testing.
Grindr users’ sensitive data shared through ad auctions without valid consent
Advertising company Xandr has been fined $9.6 million over data sharing that could reveal Grindr users’ sexual orientation.
Hackers heat up supermarket fridges, spoiling food across France
A cyberattack on supermarket temperature-control systems in France left spoiled food, empty shelves, and reports of fires.
Scammers know your name, and they’re counting on you to reply
Every reply to a scam text tells cybercriminals your number is active, which makes it worth more on the dark web and a better target for fraud.
Your “Who’s this?” reply is exactly what text scammers want
Every reply tells scammers your number is active, which makes it worth more on the dark web and a better target for fraud.
How “123456” became the key to almost 9 million personal records
A series of security failures, including a very weak password, exposed almost 9 million people’s personal information.
Phishing emails are baiting your AI assistant
If you use an AI assistant to summarize your inbox, hidden instructions could turn a phishing email you wisely ignored into your next to-do item.
A week in security (October 5 – October 11)
A list of topics we covered in the week of October 5 to October 11 of 2026
Amazon has an uncomfortably personal profile on you
Amazon thinks it knows your body, your family, and your life. You didn’t sign up for it, and we couldn’t find a way to opt-out.
Meta’s Muse AI files away your friendships, arguments, and secrets
Meta’s Muse AI builds personal dossiers that would make the FBI jealous. Even people who never signed up can get caught in its files.
ASOS breach update: Hackers stole customer details and shopping searches
Stolen ASOS data includes shopping searches as well as personal details, so customers should watch out for convincing phishing messages.
Attackers hijack country-code domains to impersonate Google and other services
Cybercriminals compromised three country-code namespaces to get certificates that could help them impersonate trusted sites.
Google issues Android security updates: who can get them and how
Google has new Android updates, but many users will not be able to get patched immediately.
Amazon has an uncomfortably personal profile on you
Amazon thinks it knows your body, your family, and your life. You didn’t sign up for it, and we couldn’t find a way to opt-out.
AI-powered phishkit arms criminals with account-hijacking tools in 10 minutes
BlueKit puts account-hijacking tools in more criminals’ hands, making it easier to target you with convincing fake login pages and scam messages.
Another ShinyHunters suspect arrested
The net is tightening around the Shiny Hunters cybercrime group following the reported arrest of a second member.
Meta’s Muse AI files away your friendships, arguments, and secrets
Meta’s Muse AI builds personal dossiers that would make the FBI jealous. Even people who never signed up can get caught in its files.
Update Chrome and ChromeOS to fix critical security issues
Google has released a new update for the Chrome browser and ChromeOS. There are a lot of security fixes in them so don’t delay.
ASOS “hackers” send push notifications to customers
ASOS customers received a push notification regarding a breach of the company. Here’s what we know so far.