A list of topics we covered in the week of August 17 to August 23 of 2026
Category: Malwarebytes
Zombie Card: An expired Visa credit card can be used for purchases
Scientific research showed that the expiration date on some Visa credit cards can be manipulated in so-called Zombie Card attacks.
Medical records, SSNs, and bank details exposed in CareCloud data breach
Healthcare technology provider CareCloud confirmed that 3.75 million people were affected by a March data breach.
ChatGPT for Teens tackles risky chats and homework shortcuts
OpenAI has strengthened ChatGPT’s protections for teens, but some of its strongest parental controls still depend on linked accounts.
Twitch wants your content for Amazon AI training. Here’s how to opt out
Twitch added an option to opt out of training Amazon AI with your content—two years after it confirmed that training had begun.
Your Mac already has a built-in firewall. Here’s how to get more from it
Malwarebytes Firewall gives you a clearer, more intuitive way to manage your Mac’s inbuilt firewall.
9 million images of people’s faces exposed by reverse lookup service
A researcher found an exposed database containing 9 million images that belonged to people finder service ClarityCheck.
41 deceptive download sites show a real link, then send you somewhere else
A legitimate-looking link or valid digital signature can offer false reassurance. Here’s why familiar download safety checks aren’t always enough.
Sideloading on Android: What it is, why it’s risky, and how to do it more safely
With the new Advanced Flow for sideloading being rolled out, it’s time to discuss what sideloading is and how to do it more safely.
Scammers are using fake crypto AML checkers to drain your wallet
We found wallet-checking sites impersonating real anti-money laundering services that trick people into approving access to scammers.
Update Chrome now: Two critical vulnerabilities fixed
Google has released a Chrome desktop update fixing 15 security vulnerabilities, including 2 buffer overflow flaws rated critical.
Your polite reply to that text is worth $2 on the dark web
A polite reply to a wrong-number text may seem harmless. But scammers use it to profile their victims and fuel a multibillion-dollar fraud industry.
Apple fixes another image-processing flaw that could allow code execution
Apple has released updates fixing 27 vulnerabilities in iOS, iPadOS, and macOS Tahoe, including a potentially serious image-processing flaw.
Be careful what you put in “anyone with the link” Google Docs
As one developer found out when his Google Doc containing company passwords showed up in Google search results.
Heights Finance data breach: What customers need to know
Leaked personal and financial data of around 750,000 US citizens, including SSNs and bank details, could put victims at risk of identity theft and…
ShieldBreak bypasses Microsoft’s patch for earlier Defender flaw
The researcher who found RoguePlanet has discovered ShieldBreak, a new way to bypass Microsoft’s fix and gain SYSTEM privileges.
Fake TikTok rewards promise cash you’ll never get
TikTok-branded rewards pages offer cash for simple tasks and daily check-ins. But getting your hands on the money is another story.
Update your Mac: Screen Sharing vulnerability exploited in the wild
Attackers are exploiting a Mac Screen Sharing vulnerability to gain root access and install Monero cryptominers.
Why Facebook’s war on ad blockers could help scammers
One ad blocker is giving up the fight against Facebook ads. The consequences could go beyond annoying advertising.
A week in security (August 10 – August 16)
A list of topics we covered in the week of August 10 to August 16 of 2026