Company
Malwarebytes is a cybersecurity company that makes anti-malware and mobile security software, researching malware and online threats.
Researcher Sammy Azdoufal reached 13 million conversations and what appeared to be all 68,000 active Eiliko robots, The Verge reported. The same flaws let him change what a reporter's robot said, and Malwarebytes advises owners to take the device off Wi-Fi.
Reality
Attorneys general in eight states sued OpenAI on October 14, alleging it misled parents about ChatGPT's safety. A proposed class action filed a day earlier alleges the company collected children's data without valid parental consent.
Reality
Google's Chrome 155 stable update, versions 155.0.8059.79/.80, fixes 37 security flaws, seven of them rated Critical. Malwarebytes says auto-update can stall on a browser that never closes or one with a blocking extension, so the installed build number is the thing to verify.
Reality
FTC sued Dmitry Belkin and 12 firms in Ohio, alleging they took at least $60 million from sextortion victims for help they mostly did not deliver. The complaint is an allegation, but it gives anyone advising victims specific things to check in a paid helpline.
Perspective Coverage
4 publishersReality
Graylark says its Raven AI matches an indoor photo to a specific property from visual cues alone, with no GPS data needed. Malwarebytes, relaying 404 Media, reports that Miami-Dade and Los Angeles police agencies have bought access.
Reality
Denmark's CPR administration says abuse of a company's authorized register access exposed data on about 8.8 million people. TV 2 reports the login, with the password 123456, was tied to a former employee of Pays ApS.
Perspective Coverage
5 publishersReality
Malwarebytes found a wave of fake Calendly pages posing as Meta Careers that harvest Facebook and Google passwords and 2FA codes. The page stays in contact with the attackers' server as the victim types, so a stolen code can be used before it expires.
Reality
Microsoft's October Patch Tuesday fixes a record 1,413 flaws, including Windows Shell zero-day CVE-2026-96951 that attackers already exploit. Malwarebytes reports Microsoft expects AI to bring more fixes each month, so triage has to key on exploitation.
Reality
Barracuda research describes phishing emails whose hidden prompts tell AI inbox assistants to present them as urgent or to add a vendor payment change. Malwarebytes' account says an ignored message can return as the assistant's own recommendation.
Reality
Sublime Security says calendar phishing is growing exponentially as apps like Google Calendar add invites automatically, even from emails sent to spam. That moves the defence from the mail filter to calendar settings and to what staff do with an unexpected meeting.
Reality
Asos says hackers took detailed profiles of potentially millions of customers, after first telling investors only basic contact details may have been accessed. The revision followed the attackers' approach to the BBC, so the people holding the records set the timing of the fuller disclosure.
Reality
Google's October 6 Chrome desktop update fixes 247 security flaws, four of them rated Critical. The fixes apply when Chrome relaunches, so a browser nobody closes keeps running the vulnerable build until someone restarts it.
Reality
Google's October Android bulletin fixes 25 flaws, seven critical, under one 2026-10-01 patch level, ending the two-part monthly split. With no exploitation reported, fleets can roll it normally once compliance checks stop expecting a second October level.
Reality
BlueKit, a phishing-as-a-service kit Malwarebytes has tracked since April, runs lures for 97 brands in 176 variants from one dashboard. Its targets include corporate SSO gateways, Salesforce and GitHub, so buyers with little skill can aim polished lures at work accounts.
Reality
Scammers text people a fake Facebook Marketplace listing naming them as seller to provoke a 'that isn't me' reply, Malwarebytes reports. Any answer tells a sender who likely already has the name and number that the line is live.
Reality
Domino's has reset a "very small number" of customer accounts that attackers opened with passwords leaked in breaches at other sites. The company says its own systems held, but a correct stolen password was all an attacker needed to get in.
Reality
Malwarebytes launched Scam Link Check, a free web tool that rates any pasted URL as safe, dangerous or unknown before anyone clicks it. Security teams now have a no-login first stop to name in scam guidance for customers and for staff holding a suspect link.
Reality
Lawmakers from both US parties have introduced two bills to curb license plate reader networks. The harder one would withhold federal grants from state and local governments that use the cameras, though neither bill is guaranteed a vote.
Reality
Malwarebytes found 70 sites cloning Kraken's xStocks, Pendle and other crypto projects to push a fake rewards vote that opens a wallet prompt. The targets, it says, are projects whose users are used to hearing about rewards and allocations.
Reality
DraftKings scored customers on how much they were likely to lose after a promotion, the New York Times reported after interviewing over 40 former staff. A ProPublica reporter betting his own money saw the offers grow as his losses did.
Reality
Security · September 28, 2026 · One report1 publisher
Security · September 25, 2026 · Confirmed2 publishers
Security · September 25, 2026 · Confirmed3 publishers
Security · August 14, 2026 · Confirmed4 publishers
Security · August 14, 2026 · Confirmed3 publishers
Security · August 14, 2026 · Confirmed2 publishers
Product · August 19, 2026 · Confirmed3 publishers
Security · August 22, 2026 · Confirmed2 publishers
Security · August 20, 2026 · Confirmed6 publishers
Security · August 28, 2026 · Confirmed4 publishers
Security · September 2, 2026 · Confirmed2 publishers
Security · September 4, 2026 · Confirmed2 publishers
Security · September 10, 2026 · Confirmed5 publishers
Security · September 10, 2026 · Confirmed3 publishers
Security · September 14, 2026 · Confirmed5 publishers
Security · September 16, 2026 · Confirmed2 publishers
Security · September 25, 2026 · One report1 publisher
Security · September 23, 2026 · Confirmed2 publishers
Security · September 19, 2026 · Confirmed8 publishers
Security · September 18, 2026 · Confirmed6 publishers
Security · September 21, 2026 · Confirmed2 publishers
Security · September 23, 2026 · Confirmed2 publishers
Security · September 14, 2026 · Confirmed2 publishers
Security · September 8, 2026 · Confirmed2 publishers