A legitimate-looking link or valid digital signature can offer false reassurance. Here’s why familiar download safety checks aren’t always enough.
Category: Malwarebytes
Sideloading on Android: What it is, why it’s risky, and how to do it more safely
With the new Advanced Flow for sideloading being rolled out, it’s time to discuss what sideloading is and how to do it more safely.
Scammers are using fake crypto AML checkers to drain your wallet
We found wallet-checking sites impersonating real anti-money laundering services that trick people into approving access to scammers.
Update Chrome now: Two critical vulnerabilities fixed
Google has released a Chrome desktop update fixing 15 security vulnerabilities, including 2 buffer overflow flaws rated critical.
Your polite reply to that text is worth $2 on the dark web
A polite reply to a wrong-number text may seem harmless. But scammers use it to profile their victims and fuel a multibillion-dollar fraud industry.
Apple fixes another image-processing flaw that could allow code execution
Apple has released updates fixing 27 vulnerabilities in iOS, iPadOS, and macOS Tahoe, including a potentially serious image-processing flaw.
Be careful what you put in “anyone with the link” Google Docs
As one developer found out when his Google Doc containing company passwords showed up in Google search results.
Heights Finance data breach: What customers need to know
Leaked personal and financial data of around 750,000 US citizens, including SSNs and bank details, could put victims at risk of identity theft and…
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
The researcher who found RoguePlanet has discovered ShieldBreak, a new way to bypass Microsoft’s fix and gain SYSTEM privileges.
Fake TikTok rewards promise cash you’ll never get
TikTok-branded rewards pages offer cash for simple tasks and daily check-ins. But getting your hands on the money is another story.
Update your Mac: Screen Sharing vulnerability exploited in the wild
Attackers are exploiting a Mac Screen Sharing vulnerability to gain root access and install Monero cryptominers.
Why Facebook’s war on ad blockers could help scammers
One ad blocker is giving up the fight against Facebook ads. The consequences could go beyond annoying advertising.
A week in security (August 10 – August 16)
A list of topics we covered in the week of August 10 to August 16 of 2026
Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits
It’s the biggest legal challenge yet to addictive social media design and its impact on children.
“Zoomsday” flaws could let one Zoom participant attack another
Update Zoom now to protect against critical vulnerabilities that could allow an attacker in the same meeting to run malicious code on your device.
Apple now uses iPhone alerts for targets of mercenary spyware
Apple explains how Threat Notifications help protect iPhone users targeted by mercenary spyware.
Patch Tuesday: Update now to fix 421 flaws, including three zero-days
Microsoft’s August Patch Tuesday fixes 421 vulnerabilities, including three zero-days, 62 critical flaws, and dozens of Office remote code execution bugs.
WhatsApp is testing a new warning for scam messages
An optional new feature uses on-device AI to flag messages that look like scams.
Fake CCleaner installs GhostDesk Chrome spyware
A convincing fake CCleaner website delivers a multi-stage malware attack that installs a spyware extension inside Chrome.
Valve warns Steam hardware buyers: Expect fake delivery scams
The warning affects recent buyers of Steam hardware, including the hugely popular Steam Deck.