Trusted Chrome, Edge extensions weaponized in supply chain campaign
The campaign was heavily focused on cryptocurrency theft, but its capabilities went further. Socket observed code that captured information typed into web forms and extracted…
Month: August 2026
OpenAI-backed initiative targets critical infrastructure cyber gaps with AI-powered defenses, coordinated global response
OpenAI and a broad group of technology and cybersecurity organizations are launching a collective cyber defense initiative calling for coordinated global efforts to protect essential…
US water systems face persistent cybersecurity gaps as July attacks renew scrutiny of federal protections, CRS says
A new report from the U.S. Congressional Research Service revealed that the cyberattacks reported against water systems in at least seven U.S. states in July…
Uncovering Hybrid Cloud Attacks Part 3 – The Response
In the final section of this blog series on uncovering complex hybrid cloud attacks, we’ll share key elements of the response to the real-world sophisticated…
Manage your Elastic security stack as code with the Elastic Stack Terraform provider
The Elastic Stack Terraform provider has reached a significant milestone. Starting with release v0.13.1, you can manage your Elastic security posture – detection rules, exception…
Nigerians extradited to US for sextortion, deaths of two teens
Two Nigerian men extradited to the U.S. on Thursday have been charged with involvement in sextortion schemes that resulted in the deaths of two minor…
New AI-Built Malware Watches How Security Teams Remove It and Fights Back
A new Windows malware toolkit is showing how artificial intelligence can change the economics of cybercrime. Known as Gryxa, it gives a criminal operator remote…
D-Link DIR-X1860Z Flaws Enable Unauthenticated Admin Password Reset and Wi-Fi Credential Theft
D-Link has released a security update for the DIR-X1860Z router after researchers discovered vulnerabilities that could enable an unauthenticated attacker on the local network to…
Debian developers rejected an LLM ban and left disclosure voluntary
A maintainer reading a merge request can’t tell whether a person or a model wrote the diff, and nobody has to say. Debian developers voted…
A week in security (August 24 – August 30)
Last week on Malwarebytes Labs: Stay safe! Scammers know more about you than you think. Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and…
What the Data Says About AI in Security Operations in 2026
AI is officially mainstream in security operations. According to Prophet Security’s State of AI in Security Operations 2026 report (produced from ViB’s survey of 250+…
ASX creates deputy CISO role
Key points The ASX has created a new deputy chief information security officer role, with Hanlie Botha appointed as its first holder. Botha joins ASX…