Chrome extension slurps up AI chats after users installed it for privacy
This case highlights a growing grey area in consumer privacy: data collection that is technically disclosed, but so far outside user expectations that most people…
Category: MalwareBytes
Two Chrome flaws could be triggered by simply browsing the web: Update now
Google issued an extra patch addressing two security vulnerabilities in Chrome, both of which can be triggered remotely by an attacker when a user visits…
Inside a purchase order PDF phishing campaign
A PDF named “NEW Purchase Order # 52177236.pdf” turned out to be a phishing lure. So we analyzed the phishing script behind it. A customer…
Photo booth flaw exposes people’s private pictures online
Photo booths are great. You press a button and get instant results. The same can’t be said, allegedly, for the security practices of at least…
SoundCloud, Pornhub, and 700Credit all reported data breaches, but the similarities end there
Comparing data breaches is like comparing apples and oranges. They differ on many levels. To news media, the size of the brand, how many users…
Android threats in 2025: When your phone becomes the main attack surface
Android users spent 2025 walking a tighter rope than ever, with malware, data‑stealing apps, and SMS‑borne scams all climbing sharply while attackers refined their business…
Photo booth flaw exposes people’s private pictures online
Photo booths are great. You press a button and get instant results. The same can’t be said, allegedly, for the security practices of at least…
Google is discontinuing its dark web report: why it matters
Google has announced that early next year they are discontinuing the dark web report, which was meant to monitor breach data that’s circulating on the…
Pig butchering is the next “humanitarian global crisis” (Lock and Code S06E25)
This week on the Lock and Code podcast… This is the story of the world’s worst scam and how it is being used to fuel…
PayPal closes loophole that let scammers send real emails with fake purchase notices
After an investigation by BleepingComputer, PayPal closed a loophole that allowed scammers to send emails from the legitimate service@paypal.com email address. Following reports from people…
The US digital doxxing of H-1B applicants is a massive privacy misstep
Technology professionals hoping to come and work in the US face a new privacy concern from Monday. Starting December 15, skilled workers on H-1B visas…
Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer
Researchers have found evidence that AI conversations were inserted in Google search results to mislead macOS users into installing the Atomic macOS Stealer (AMOS). Both…