5+ day, 18+ hour ago   (1052+ words) In a recent post, we looked at reports of League of Legends players receiving suspicious friend requests shortly after matches. The accounts quickly steered the conversation toward Discord, where they promoted paid adult-content pages. At the time, one unanswered question…...

5+ day, 22+ hour ago   (123+ words) Last week on Malwarebytes Labs: Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android. Try it free → As X expands into payments, users are receiving password-reset emails they didn’t request. Here’s…...

1+ week, 4+ day ago   (351+ words) Anthropic has warned some Claude users that criminals are using information stealers to take over their accounts. Rather than guessing passwords or intercepting two-factor authentication (2FA) codes, the attackers steal the browser sessions that prove a user is already logged in....

1+ week, 5+ day ago   (389+ words) McKesson says it discovered the cybersecurity incident on August 25, 2026, and that its investigation is still in early stages. “Based on our investigation thus far, including assessments by leading cybersecurity industry experts supporting our response, we’ve confirmed that the unauthorized access…...

2+ week, 3+ day ago   (634+ words) From several independent reports, we’ve seen evidence of scammers using fake Android “interview” apps to target job seekers on the Indeed platform. Indeed is one of the world’s largest employment websites, giving scammers access to a huge pool of potential…...

2+ week, 4+ day ago   (507+ words) A new type of prompt injection attack shows why giving AI assistants access to browsers, code tools, and private data deserves extra caution. AI researchers describe “Cryptographic Context Injection”—an attack that hides malicious instructions inside encrypted data. The AI…...

2+ week, 5+ day ago   (532+ words) AliExpress, the online marketplace owned by Alibaba Group, has come under scrutiny after researchers and browser maker Brave reported finding silent Web Audio processing on the site that could help fingerprint visitors’ devices. The audio processing did not record people…...

2+ week, 5+ day ago   (1422+ words) A wave of websites is offering to check whether your antivirus is working. They call themselves SysScan, carry Microsoft branding, and all reach the same conclusion: Your computer has serious problems, and the cause is the antivirus software you installed....

2+ week, 5+ day ago   (1618+ words) In our previous analysis of the malicious RenPy campaigns, we identified a multi-stage loader deployed as part of the infection chain. Further threat hunting has since shown that the same loader, which we track as PavinLoader, is being used across…...

3+ week, 1+ day ago   (252+ words) Healthcare technology giant CareCloud has confirmed that a data breach earlier this year impacted more than 3.75 million people, making it one of the largest healthcare data incidents disclosed this year. The New Jersey-based company, which provides electronic health record (EHR)…...