Malwarebytes: A week in security (October 27 – November 2)

Last week on Malwarebytes Labs:

• Update Chrome now: 20 security fixes just landed
• How scammers use your data to create personalized tricks that work
• Ransomware gang claims Conduent breach: what you should watch for next
• Fake PayPal invoice from Geek Squad is a tech support scam
• Atlas browser’s Omnibox opens up new privacy and security risks
• Gmail breach panic? It’s a misunderstanding, not a hack
• School’s AI system mistakes a bag of chips for a gun
• Around 70 countries sign new UN Cybercrime Convention—but not everyone’s on board
• NSFW ChatGPT? OpenAI plans “grown-up mode” for verified adults
• How to set up two factor authentication (2FA) on your Instagram account
• Phishing scam uses fake death notices to trick LastPass users

Stay safe!

A week in security (October 27 - November 2)

A list of topics we covered in the week of October 27 to November 2 of 2025

www.malwarebytes.com

Malwarebytes: A week in security (November 3 – November 9)

Last week on Malwarebytes Labs:

• Malwarebytes scores 100% in AV-Comparatives Stalkerware Test 2025
• Fake CAPTCHA sites now have tutorial videos to help victims install malware
• Hackers commit highway robbery, stealing cargo and goods
• Android malware steals your card details and PIN to make instant ATM withdrawals
• Take control of your privacy with updates on Malwarebytes for Windows
• Cyberattacks on UK water systems reveal rising risks to critical infrastructure
• Should you let Chrome store your driver’s license and passport?
• Apple patches 50 security flaws—update now
• “Sneaky” new Android malware takes over your phone, hiding in fake news and ID apps
• Sling TV turned privacy into a game you weren’t meant to win
• Attack of the clones: Fake ChatGPT apps are everywhere
• Would you sext ChatGPT? (Lock and Code S06E22)
• Malwarebytes aces PCMag Readers’ Choice Awards and AVLab Cybersecurity Foundation tests

On the ThreatDown blog:

• Inside EDR-Freeze: How ThreatDown stops the attack before it spreads

A week in security (November 3 - November 9)

A list of topics we covered in the week of November 3 to November 9 of 2025

www.malwarebytes.com

A week in security (November 10 – November 16)

Last week on Malwarebytes Labs:

• Be careful responding to unexpected job interviews
• Your passport, now on your iPhone. Helpful or risky?
• 1 million victims, 17,500 fake sites: Google takes on toll-fee scammers
• Are you paying more than other people? NY cracks down on surveillance pricing
• We opened a fake invoice and fell down a retro XWorm-shaped wormhole
• Phishing emails disguised as spam filter alerts are stealing logins
• Update now: November Patch Tuesday fixes Windows zero-day exploited in the wild
• How Malwarebytes stops the ransomware attack that most security software can’t see
• Samsung zero-day lets attackers take over your phone
• How credentials get stolen in seconds, even with a script-kiddie-level phish
• Stolen iPhones are locked tight, until scammers phish your Apple ID credentials
• Fantasy Hub is spyware for rent—complete with fake app kits and support
• Watch out for Walmart gift card scams

A week in security (November 10 - November 16)

A list of topics we covered in the week of November 10 to November 16 of 2025

www.malwarebytes.com

A week in security (November 17 – November 23)

Last week on Malwarebytes Labs:

• AI teddy bear for kids responds with sexual content and advice about weapons
• Fake calendar invites are spreading. Here’s how to remove them and prevent more
• Budget Samsung phones shipped with unremovable spyware, say researchers
• What the Flock is happening with license plate readers?
• Holiday scams 2025: These common shopping habits make you the easiest target
• [Correction] Gmail can read your emails and attachments to power “smart features”
• Mac users warned about new DigitStealer information stealer
• Attackers are using “Sneaky 2FA” to create fake sign-in windows that look real
• Sharenting: are you leaving your kids’ digital footprints for scammers to find?
• Chrome zero-day under active attack: visiting the wrong site could hijack your browser
• Thieves order a tasty takeout of names and addresses from DoorDash
• Why it matters when your online order is drop-shipped
• The price of ChatGPT’s erotic chat? $20/month and your identity
• Your coworker is tired of AI “workslop” (Lock and Code S06E23)
• Scammers are sending bogus copyright warnings to steal your X login

A week in security (November 17 - November 23)

A list of topics we covered in the week of November 17 to November 23 of 2025

www.malwarebytes.com