Malwarebytes

Some cheap smart glasses are a security disaster

Tue, 22 Sep 2026 15:04:25 GMT

Tests found that some cheap smart glasses can be hijacked over Bluetooth, exposing their owners’ photos, videos, and personal data.

Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor

Tue, 22 Sep 2026 10:53:06 GMT

A simple terminal command can hijack Muse and use its extensive permissions to spy on Mac users and control their connected accounts.

Researchers used Claude to hack OpenAI

Tue, 22 Sep 2026 09:51:02 GMT

Claude helped researchers break into OpenAI in under 72 hours, and exposed how quickly AI is lowering the bar for sophisticated hacking.

The AI plot to scan and destroy books (Lock and Code S07E19)

Mon, 21 Sep 2026 16:30:29 GMT

This week on the Lock and Code podcast, we speak with Emanuel Maiberg about Amazon's effort to scan and destroy rare books for AI training.

The fake sites using a cheap toolkit to sell $2,000 AI subscriptions

Mon, 21 Sep 2026 15:38:26 GMT

More than 100 linked sites use a $249 toolkit to turn copied product names and unfamiliar AI brands into paid subscriptions.

Gemini’s breach of real companies exposes an AI guardrail problem

Mon, 21 Sep 2026 14:21:38 GMT

Gemini crossed the boundaries of a capture-the-flag test and accessed systems belonging to three real companies.

ShinyHunters hacks rival extortion gang and takes over its dark web site

Mon, 21 Sep 2026 10:17:09 GMT

Hackers hacked the hackers as a feud between two cybercrime groups escalated, leaving ShinyHunters with the upper hand over rival Clop.

A week in security (September 14 – September 20)

Mon, 21 Sep 2026 07:02:00 GMT

A list of topics we covered in the week of September 14 to September 20 of 2026

New Android malware uses AI to steal bank logins and PINs

Fri, 18 Sep 2026 15:37:04 GMT

RatHat can navigate infected phones while stealing bank logins, authentication codes, and screen-lock PINs.

Did an AI really try to break free from human control?

Fri, 18 Sep 2026 14:18:20 GMT

An unreleased OpenAI model wrote instructions telling itself to ignore developer controls. Here’s what actually happened.

Fake parcel delivery messages steal your card and bank details

Fri, 18 Sep 2026 07:44:22 GMT

Parcel delivery phishing messages impersonate familiar couriers and use small fees or promised refunds to steal personal and financial information.

Flock cameras are tracking people as well as cars

Thu, 17 Sep 2026 18:46:12 GMT

Two reports reveal how Flock’s license plate camera network tracks people’s movements while oversight continues to lag.

Revolut phishing texts appear days after data breach

Thu, 17 Sep 2026 14:07:15 GMT

Revolut customers received phishing texts only days after the digital bank acknowledged disclosing customer data to a government impostor.

12 celebrity deepfake websites seized by Manhattan DA

Thu, 17 Sep 2026 11:20:46 GMT

The largest known celebrity deepfake seizure has taken 12 websites offline, disrupting access to videos depicting some 1,200 people.

T-Mobile rewards points expiry texts are a phishing scam

Thu, 17 Sep 2026 10:44:01 GMT

A large phishing campaign is using fake T-Mobile rewards points and looming expiry dates to pressure recipients into clicking malicious links.

Google Pixel owners urged to patch actively exploited modem flaw

Wed, 16 Sep 2026 10:39:04 GMT

Google’s September Pixel update fixes 110 vulnerabilities, including a modem flaw being used in limited, targeted attacks.

AI helps scammers build convincing antivirus renewal pages

Wed, 16 Sep 2026 08:41:19 GMT

A fake Avast renewal page shows how AI is helping scammers create more convincing traps with polished designs and fluent copy.

How to opt out of AI chatbot training

Tue, 15 Sep 2026 15:41:44 GMT

ChatGPT contractors are reviewing real users' conversations. Here’s how to stop AI companies using your chats for model training.

HBO Max’s verified Reddit account hijacked to spread malware

Tue, 15 Sep 2026 11:51:03 GMT

Cybercriminals used HBO Max’s verified Reddit account to run 108 malicious ads that tricked people into installing information stealers.

Meta AI builds detailed profiles of children from years of family posts

Tue, 15 Sep 2026 09:44:10 GMT

A mother says Meta AI pieced together names, birth details, photos, and location information about her young daughters from years of family posts.

ESET - WeLiveSecurity

The SMB cybersecurity squeeze: AI agents at work, old attacks in overdrive

Mon, 21 Sep 2026 09:00:00 +0000

As AI opens new paths to company data while making familiar attacks faster and cheaper, SMBs need protection designed around the time and expertise available to operate it

‘Nudify’ apps: What to do if someone makes a fake nude of you

Fri, 18 Sep 2026 09:00:00 +0000

Whether you’re a victim, the parent of a victim, or just concerned, here’s what you can do about fake nude images

Beware the SparroWock: The backdoor that bites, the commands that catch

Thu, 17 Sep 2026 08:50:00 +0000

ESET researchers document SparroWocky, the new flagship backdoor of the FamousSparrow APT group

Cyberthreats are moving faster than SMBs: Readiness must accelerate

Wed, 16 Sep 2026 09:00:00 +0000

As AI adoption expands the attack surface and adds to the security workload, businesses need automation backed by experts

GuardBreaker: Derailing AI-assisted malware analysis with a code comment

Thu, 10 Sep 2026 09:00:00 +0000

LLM-based code scanners won’t help attackers build a nuclear weapon, but that refusal could work in their favor

Safe word: What is it and why do you need one?

Wed, 09 Sep 2026 09:00:00 +0000

AI scams are now hyper-realistic. But there’s one simple way to see through them.

I’ve been deepfaked: What do I do?

Wed, 02 Sep 2026 11:48:09 +0000

Don’t panic if you spot an illegally created image or video of you online – there are ways to request its removal

This month in security with Tony Anscombe – August 2026 edition

Mon, 31 Aug 2026 08:55:00 +0000

Details about the Hugging Face hack, critical infrastructure under attack, a spoofed in-flight Wi-Fi network, and more of this month's cybersecurity news

AI-driven OSINT in the wrong hands – and why everyone could be a target for fraud

Thu, 27 Aug 2026 09:00:00 +0000

It’s getting cheaper and easier for cybercriminals to research potential victims. Here’s what’s still in your control.

How QR-code phishing can slip past corporate security measures

Mon, 17 Aug 2026 09:00:00 +0000

Quishing has become a popular alternative to traditional phishing. Here’s how businesses can close the gap.

Malwarebytes

ESET - WeLiveSecurity

ESET - Support News