All-in-one cybersecurity that's always by your side. Need support? @SupportMWB
Santa Clara, CA
Joined January 2009
- Tweets26.6K
- Following1K
- Followers90.7K
- Likes7.2K
Pinned Tweet
You can disable Copilot with Malwarebytes, btw.
Microsoft warns Windows 11's upcoming AI upgrade has security and performance implications.
Microsoft says Agentic Workspace in Windows 11 will not only have access to some personal folders, but also your apps.
"Windows grants read and write access to the following known folders: Documents, Downloads, Desktop, Videos, Pictures, Music when the setting is enabled," Microsoft warns.
Microsoft says you should only enable this feature if you understand the security implication.
ALT Agentic features in Windows 11
A 49-year-old man sold his belongings and hopped on a bus to travel 2,000 km to meet a woman he had fallen for.
But despite her having a social media account with more than 300,000 followers, she never existed.
malwarebytes.com/blog/scams/…
Make sure you leave out milk and cookies for your web devs tonight.
🔐 Node.js security updates are now available!
New releases for Node.js 22.x, 24.x & 26.x address multiple vulnerabilities, including high-severity issues.
Review the details and update your systems to stay secure.
🔗 nodejs.org/en/blog/vulnerabi…
#NodeJS #Security
🚨 Two severe PHP flaws were patched this morning.
About 70% of the web uses PHP. Every site using PHP needs to update ASAP.
RCE via OOM corruption (CVSS 9.2/10):
github.com/php/php-src/secur…
RCE via stale global state (CVSS 9.2/10):
github.com/php/php-src/secur…
If you use an Android phone, Google may try to link your phone number to all of your Google accounts, even ones you'd rather keep separate.
Here's how to stop it.
malwarebytes.com/blog/mobile…
You Can See Every Scam
ALT A meme featuring Nathan Fielder and Elizabeth Holmes from You Can See Everything. Top text: You’re legitimately trying to deliver a package to me, right? Bottom text: Why would I deceive you?
Privacy invading glasses known for invading privacy continue to invade privacy.
malwarebytes.com/blog/news/2…
Attackers hijacked AOMEI Backupper’s update servers to push malware during brief windows between April and July 2026.
The attack installed a persistent backdoor, potentially enabling remote access and further infections.
malwarebytes.com/blog/news/2…
Millions of California students’ sensitive data stolen in breach, including name, date of birth, and address.
malwarebytes.com/blog/data-b…
Browser Guard blocks this.
Ad blocking isn’t a moral argument anymore. Ad blockers are security tools.
‼️ Breaking: First-ever Zero-Click Mercenary Spyware Delivered via Targeted Ads
Details: cybersecuritynews.com/0-clic…
Simply viewing an online advertisement can be enough to infect a device with powerful spyware, without the user clicking, downloading a file, or seeing any warning.
Citizen Lab researchers documented what they call the first public technical proof of zero-click mercenary spyware delivered through targeted ads.
The method, named “AdFection,” infected devices at international news network Al Jazeera with spyware linked to Israeli vendor Candiru, which now operates as Integrity Labs. For users and organizations, the case shows that careful clicking alone cannot stop every infection.
#cybersecuritynews
OpenAI is facing legal challenges over how ChatGPT interacts with children.
malwarebytes.com/blog/ai/202…
You had one Chrome update this month, yes. But what about second update?
malwarebytes.com/blog/bugs/2…
Is this link safe? Now you can find out before you click!
Introducing Malwarebytes Scam Link Check, a simple way to check suspicious links for scams without visiting the site.
Stay one step ahead of scammers and browse with confidence.
malwarebytes.com/blog/produc…
Smart-device botnets are already a problem, but AI-powered worms could soon infect your home's smart devices.
malwarebytes.com/blog/ai/202…
Red flags to watch for:
• Unfamiliar recruiting domains
• Requests for your Facebook password to schedule an interview
• Login pop-ups with fake browser address bars
• Unexpected requests for 2FA codes or sign-in approvals
Verify recruiters through official channels.
4/🧵
The phishing pages send your credentials and 2FA codes to attackers in real time.
Normally 2FA stops these types of attacks. But if the victim hands over the codes, the attackers can log in to your accounts while you interact with the fake page.
3/🧵
🚨 Job seekers, beware.
We discovered fake “Meta Careers” interview pages that are stealing Facebook and Google logins.
The scam starts with a fake Calendly booking page to schedule a 30-minute call with a recruiter.
1/🧵
