company
Malwarebytes is a cybersecurity company that makes anti-malware and mobile security software, researching malware and online threats.
No evidence-backed relationships are recorded.
Malwarebytes found 70 sites cloning Kraken's xStocks, Pendle and other crypto projects to push a fake rewards vote that opens a wallet prompt. The targets, it says, are projects whose users are used to hearing about rewards and allocations.
Reality
DraftKings scored customers on how much they were likely to lose after a promotion, the New York Times reported after interviewing over 40 former staff. A ProPublica reporter betting his own money saw the offers grow as his losses did.
Reality
Arizona's Supreme Court says attackers copied over 150,000 foster-care review reports dating to 2010 from backups after an employee clicked a phishing link. The court kept those copies to recover from ransomware, so the store meant to survive an attack is the one that leaked.
Reality
Meta's Muse, reportedly downloaded 3 million times in its first week, gave a Marketplace buyer a seller's home address and booked a visit he never approved. No one was hurt, but his approval of auto-replies let the agent disclose where he lives and send a stranger to his door.
Reality
Scammers wrapped the leaked DarkSword exploit chain in a fake iPhone Duo preorder page that attacks the moment it opens, before any form, tap, or download. Apple has already patched the flaws it uses, so a current iOS build is what protects a phone here.
Reality
Contractors hired to grade Copilot's image edits see each user's original photo, faces uncensored, beside the request and two AI outputs, 404 Media reported. Microsoft did not say whether users can keep their uploads out of those reviews.
Reality
Adyen's 2026 fraud report, built on $1.6 trillion in payments, found about half of surveyed merchants saw more good orders wrongly declined. Those lost sales rarely reach the dashboards where fraud teams track chargebacks, so the cost of caution goes largely uncounted.
Reality
ShinyHunters has shown journalists FBI medical exams that name agents and their addresses, from a set it says covers about 60,000 current and former staff. The FBI has so far confirmed only an incident in FBIJobs-related systems, and the group is threatening to publish within five days.
Reality
LinkedIn now lets verified employers, which it counts at more than 700,000 companies, remove false staff from their Page's people list and search results. The impostor's profile keeps the claimed job, so the check protects only targets who look up a recruiter at a company they already know.
Reality
CARBONATO, a Docker botnet running since October 2024, hijacks hosts on open port 2375 and steals keys from 14 AI providers to fund its own LLM gateway. ThreatDown found the crew's own container registry exposed, handing defenders 4.3 GB of its toolchain.
Perspective Coverage
3 publishersReality
Apple's latest mercenary spyware notifications went to users in 110 countries. The response checklist is per-person, and a standard MDM baseline covers almost none of it.
Perspective Coverage
4 publishersReality
Group-IB says a 13-minute call ended with a loan in the victim's name and card data streaming to a fake merchant terminal, every transaction approved with the victim's own PIN.
Perspective Coverage
3 publishersReality
Meta's on-device model flags likely scams from non-contacts in a limited beta. It carries no enforcement, no admin visibility, and no view of the vector that works best.
Reality
ClarityCheck exposed 450GB of photos plus a second leak of emails and phone numbers, according to researcher Jeremiah Fowler. The company disputes the word "exposed."
Perspective Coverage
4 publishersReality
A researcher found 450GB of uploaded photos with no authentication in front of them at US lookup service ClarityCheck. A face, unlike a password, cannot be reset.
Reality
Zimperium says the Android banking Trojan now abuses Accessibility to switch on wireless debugging and run commands through the ADB daemon. The target list is the smaller half of the story.
Perspective Coverage
6 publishersReality
Microsoft's TerminalFix writeup shows the same fake CAPTCHA lure now feeding multi-line PowerShell into Windows Terminal, where it sideloads a signed binary, pulls payloads out of PNG files and leaves a reverse tunnel behind.
Perspective Coverage
4 publishersReality
ThreatFabric traced the StreamRat dropper through four ordinary Android permission prompts to an Accessibility grant that hands operators keystrokes, credential overlays and remote control, with no infection count published.
Reality
Job lures arrive by email, romance by social media, tech support by phone, across three months of one vendor's telemetry. The counts measure delivery; conversion, where the training math gets harder, isn't part of what's tracked.
Reality
CVE-2026-87491 gives a crafted web page code execution inside Chrome's sandbox. The fix only takes effect when the browser restarts, and long-running sessions carry that exposure until they do.
Perspective Coverage
5 publishersReality
Security · September 10, 2026 · 3 publishers
Security · September 14, 2026 · 5 publishers
Security · September 16, 2026 · 2 publishers
Security · September 25, 2026 · 1 publisher
Security · September 23, 2026 · 2 publishers
Security · September 19, 2026 · 8 publishers
Security · September 18, 2026 · 6 publishers
Security · September 21, 2026 · 2 publishers
Security · September 23, 2026 · 1 publisher
Security · September 23, 2026 · 2 publishers
Security · September 22, 2026 · 1 publisher
Security · September 21, 2026 · 1 publisher
Build · September 19, 2026 · 1 publisher
Security · September 18, 2026 · 1 publisher
Security · September 18, 2026 · 1 publisher
Security · September 17, 2026 · 1 publisher
Security · September 15, 2026 · 1 publisher
Security · September 15, 2026 · 1 publisher
Security · September 14, 2026 · 2 publishers
Security · September 10, 2026 · 1 publisher
Security · September 8, 2026 · 1 publisher
Security · September 8, 2026 · 2 publishers
Security · September 4, 2026 · 1 publisher
Security · September 4, 2026 · 1 publisher
Security · September 3, 2026 · 1 publisher
Security · September 2, 2026 · 1 publisher
Security · September 1, 2026 · 1 publisher
Security · August 28, 2026 · 1 publisher
Security · August 27, 2026 · 1 publisher
Security · August 27, 2026 · 1 publisher
Security · August 26, 2026 · 2 publishers
Security · August 26, 2026 · 1 publisher
Security · August 25, 2026 · 1 publisher
Security · August 24, 2026 · 1 publisher
Security · August 24, 2026 · 1 publisher
Security · August 24, 2026 · 1 publisher
Product · August 22, 2026 · 1 publisher
Security · August 21, 2026 · 1 publisher
Security · August 20, 2026 · 1 publisher
Security · August 20, 2026 · 1 publisher