Google is discontinuing its dark web report: why it matters
Google has announced that early next year they are discontinuing the dark web report, which was meant to monitor breach data that’s circulating on the…
Category: MalwareBytes
Pig butchering is the next “humanitarian global crisis” (Lock and Code S06E25)
This week on the Lock and Code podcast… This is the story of the world’s worst scam and how it is being used to fuel…
PayPal closes loophole that let scammers send real emails with fake purchase notices
After an investigation by BleepingComputer, PayPal closed a loophole that allowed scammers to send emails from the legitimate service@paypal.com email address. Following reports from people…
The US digital doxxing of H-1B applicants is a massive privacy misstep
Technology professionals hoping to come and work in the US face a new privacy concern from Monday. Starting December 15, skilled workers on H-1B visas…
Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer
Researchers have found evidence that AI conversations were inserted in Google search results to mislead macOS users into installing the Atomic macOS Stealer (AMOS). Both…
How private is your VPN?
When you’re shopping around for a Virtual Private Network (VPN) you’ll find yourself in a sea of promises like “military-grade encryption!” and “total anonymity!” You…
DroidLock malware locks you out of your Android device and demands ransom
Researchers have analyzed a new threat campaign actively targeting Android users. The malware, named DroidLock, takes over a device and then holds it for ransom.…
Malwarebytes for Mac now has smarter, deeper scans
Say hello to the upgraded Malwarebytes for Mac—now with more robust protection, more control, and the same trusted defense you count on every day. We’ve…
Another Chrome zero-day under attack: update now
Google issued an extra patch for a security vulnerability in Chrome that is being actively exploited, and it’s urging users to update. The patch fixes…
December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices
These updates from Microsoft fix serious security issues, including three that attackers are already exploiting to take control of Windows systems. In total, the security…
GhostFrame phishing kit fuels widespread attacks against millions
GhostFrame is a new phishing-as-a-service (PhaaS) kit, tracked since September 2025, that has already powered more than a million phishing attacks. Threat analysts spotted a…
Prompt injection is a problem that may never be fixed, warns NCSC
Prompt injection is shaping up to be one of the most stubborn problems in AI security, and the UK’s National Cyber Security Centre (NCSC) has…