6+ day, 4+ hour ago   (456+ words) This week on the Lock and Code podcast… Crooks are taking a holiday. They’re counting on you to fund it. All of these attack models seek to turn sensitive or important data into currency. But an emerging form of digital…...

2+ week, 6+ day ago   (120+ words) Last week on Malwarebytes Labs: Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android. Try it free → Scientific research showed that the expiration date on some Visa credit cards can be…...

6+ day, 15+ hour ago   (123+ words) Last week on Malwarebytes Labs: Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android. Try it free → As X expands into payments, users are receiving password-reset emails they didn’t request. Here’s…...

3+ week, 5+ day ago   (407+ words) Heights Finance is a consumer lender that offers personal installment loans. Reportedly, the company filed a report with Texas regulators mentioning 734,828 affected people, though that figure should not automatically be read as a confirmed nationwide total, since Heights Finance operates…...

1+ week, 6+ day ago   (389+ words) McKesson says it discovered the cybersecurity incident on August 25, 2026, and that its investigation is still in early stages. “Based on our investigation thus far, including assessments by leading cybersecurity industry experts supporting our response, we’ve confirmed that the unauthorized access…...

1+ week, 5+ day ago   (351+ words) Anthropic has warned some Claude users that criminals are using information stealers to take over their accounts. Rather than guessing passwords or intercepting two-factor authentication (2FA) codes, the attackers steal the browser sessions that prove a user is already logged in....

2+ week, 6+ day ago   (391+ words) Researchers have uncovered ToxicPanda 2.0, an Android banking Trojan and remote-access tool designed for account takeover and “on-device fraud.” The core objective is on-device fraud. That means that rather than logging in from an attacker-controlled machine, the operator can carry out…...

1+ week, 4+ day ago   (563+ words) A new dark web platform called Nexus claimed to be selling 153 million driver’s license scans and millions of other identity and medical cards. The collection included more than 153 million driver’s licenses, 10 million ID cards, 3 million travel documents, and 579,000 medical cards,…...

3+ week, 4+ day ago   (1627+ words) Most wrong-number texts are harmless. Some are the first step in a carefully planned scam. By replying, you may be confirming that your number is active and that you’re willing to engage with strangers, making you a more valuable target…...

2+ week, 4+ day ago   (374+ words) A two-year investigation into educational technology (EdTech) apps used by Utah schools found that many were collecting and sharing student data in ways that appeared inconsistent with their privacy commitments. EdTech is a massive commercial industry and some argue that…...