In a security advisory, Meta has disclosed a vulnerability that allowed an attacker to run arbitrary code on a user’s system that existed in all WhatsApp versions before 2.2450.6. WhatsApp offers a desktop application for Windows and macOS, which users can synchronize with their mobile devices. Desktop versions of WhatsApp are generally used as extensions […]
WhatsApp for Windows vulnerable to attacks. Update now! Leggi tutto »
When you next type something sensitive on your computer keyboard, be sure that no-one else is watching. A recent case of alleged cyber-voyeurism shows how important it is to secure your computer against unwanted eavesdroppers using malwareware. In a class action lawsuit, six women have accused pharmacist Matthew Bathula of invading their privacy by spying
Bad vibes are big news in privacy right now, with the public feeling isolated in securing their sensitive information from companies, governments, AI models, and scammers. That’s the latest from Malwarebytes research conducted this month, which revealed that the vast majority of people are concerned about wrongful data access from nearly every corner of their
The pressure of the looming tax filing deadline (April 15th in the US) can make anyone rush online tasks. Cybercriminals are acutely aware of this increased activity and are exploiting trusted platforms like Google to target Intuit QuickBooks users. By purchasing prominent Google Ads, they are creating highly convincing fake login pages designed to pilfer
Tax deadline threat: QuickBooks phishing scam exploits Google Ads Leggi tutto »
Cwmbran in Wales, a town with a population of just under 50,000, holds the Guinness World Record for the most roundabouts—at least according to Google AI Overviews. Except that’s not actually true… Ben Black has been publishing lighthearted fake stories on April Fools’ Day for his community news site Cwmbran Life since 2018. The April
Google AI taken for a ride by April Fools’ Day joke Leggi tutto »
Google has patched 62 vulnerabilities in Android, including two actively exploited zero-days in its April 2025 Android Security Bulletin. When we say “zero-day” we mean an exploitable software vulnerability for which there was no patch at the time of the vulnerability being exploited or published. The term reflects the amount of time that a vulnerable
Google fixes two actively exploited zero-day vulnerabilities in Android Leggi tutto »
This week on the Lock and Code podcast… It has probably happened to you before. You and a friend are talking—not texting, not DMing, not FaceTiming—but talking, physically face-to-face, about, say, an upcoming vacation, a new music festival, or a job offer you just got. And then, that same week, you start noticing some eerily
Is your phone listening to you? (Lock and Code S06E07) Leggi tutto »
Back in August 2024, we warned about a relatively new type of SMS phishing (or smishing) scam that was doing the rounds. Now a new wave of toll fee scams are working their way round the US. These attempts come as an unexpected text message linking to a website pretending to belong to one of
Toll fee scams are back and heading your way Leggi tutto »
Last week on Malwarebytes Labs: Why we’re no longer doing April Fools’ Day Intimate images from kink and LGBTQ+ dating apps left exposed online “Urgent reminder” tax scam wants to phish your Microsoft credentials “Nudify” deepfakes stored unprotected online Location, name, and photos of random kids shown to parents in child tracker mix up QR
A week in security (March 31 – April 6) Leggi tutto »
Security researcher Evan Connelly discovered an enormous flaw affecting one of the largest telecommunications companies in the world that could allow any single person to view the recent incoming call log for potentially any Verizon phone number. “In short, anyone could lookup data for anyone,” Connelly said. A vulnerability in the Verizon Call Filter iOS
Flaw in Verizon call record requests put millions of Americans at risk Leggi tutto »
