A week in security (February 2 – February 8)
9 February 2026 at 09:01
Last week on Malwarebytes Labs:
- Apple Pay phish uses fake support calls to steal payment details
- Open the wrong βPDFβ and attackers gain remote access to your PC
- Flock cameras shared license plate data without permission
- Grok continues producing sexualized images after promised fixes
- Firefox is giving users the AI off switch
- An AI plush toy exposed thousands of private chats with children
- AT&T breach data resurfaces with new risks for customers
- Appleβs new iOS setting addresses a hidden layer of location tracking
- [updated] A fake cloud storage alert that ends at Freecash
- How Manifest v3 forced us to rethink Browser Guard, and why thatβs a good thing
- Scam-checking just got easier: Malwarebytes is now in ChatGPT
- How fake party invitations are being used to install remote access tools
Stay safe!