A buyer chatted and negotiated with Muse, which shared the seller’s address and arranged a pickup. The seller knew nothing about it.
Category: Malwarebytes
Fake iPhone Duo preorder scam triggers DarkSword attack
A fake iPhone Duo preorder page promises a $500 voucher. Open it on a vulnerable iPhone, and it tries to break in before you fill out the form.
Update your iPhone, iPad, or Mac: Flaw could run attackers’ code
A malicious file could trigger the vulnerability. Apple says it may already have been used against iPhone users.
Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
More than 70 fake crypto sites promise extra rewards for casting a vote, then prompt visitors to connect their wallets.
Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
Copilot users asked for upskirt images and sexualized edits of people in uploaded photos. Human contractors were asked to judge the results.
Shadow AI explained: The work shortcut that could leak your company’s secrets
An AI shortcut can send confidential work data beyond your company’s control. Here’s how to get the benefits without taking unnecessary risks.
Pentagon breach exposes Social Security numbers and military records of millions
Social Security numbers and other personal details of military personnel and their families were exposed in a months-long Pentagon breach.
Malwarebytes earns another Top Product award in independent testing
Three independent labs, three standout results: a perfect score, top certification, and every threat stopped before it ran.
Losing gamblers pushed to bet more by DraftKings’ AI, report says
Betting site DraftKings has been accused of using AI to target gamblers likely to lose more after receiving promotions. The company disputes the findings.
A week in security (September 21 – September 27)
A list of topics we covered in the week of September 21 to September 27 of 2026
Hackers steal protective order and foster care records from Arizona courts
Attackers copied sensitive court records, including more than 150,000 foster care reports, raising privacy and safety concerns for those Arizonans…
Your car’s app could be telling Big Tech who you are and where you go
Who you are and where you live, work, and seek medical care could be revealed by data your car’s app shares with trackers.
Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home
A buyer chatted and negotiated with Muse, which shared the seller’s address and arranged a pickup. The seller knew nothing about it.
Update your iPhone, iPad, or Mac: Flaw could run attackers’ code
A malicious file could trigger the vulnerability. Apple says it may already have been used against iPhone users.
Fake iPhone Duo preorder scam triggers DarkSword attack
A fake iPhone Duo preorder page promises a $500 voucher. Open it on a vulnerable iPhone, and it tries to break in before you fill out the form.
Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
Copilot users asked for upskirt images and sexualized edits of people in uploaded photos. Human contractors were asked to judge the results.
OpenAI pauses work on top AI models after agent slips past internet controls
An OpenAI agent bypassed internet restrictions and kept running after an alert. It’s another case of AI misalignment no one can afford to ignore.
FBI agents’ blood tests and doctors’ notes surface after breach
A “shellfish and banana allergy” is among the details in medical records hackers showed reporters. They claim to hold records on thousands of FBI staff.
A week in security (September 21 – September 27)
A list of topics we covered in the week of September 21 to September 27 of 2026
Kothamine malware uses Tailscale’s tailcat to evade network detection
Kothamine uses a legitimate Tailscale tool to receive attackers’ commands through an encrypted connection with no malicious domain to block.