blog.malwarebytes.com

• Millions of cars could be tracked and unlocked by a hidden security flaw

  A hidden flaw in a dealer-installed car alarm could let attackers unlock vehicles and track their locations. Many owners don't know they have one.

• WhatsApp Web chats exposed by Adobe’s Acrobat extension flaw

  HermeticReader is a now-patched vulnerability in Adobe's popular Acrobat Chrome extension that could have been used to spy on WhatsApp Web users.

• Chick-fil-A loyalty accounts hijacked using stolen passwords

  If you have a Chick-fil-A One account, now is a good time to change your password—and make sure it's one you don't use anywhere else.

• Paidwork breach exposes data of 23 million users: Check if you’re affected

  A reported breach at microtask platform Paidwork exposed personal and financial data of more than 23 million users. Here's how to check if you're affected.

• What happens if you visit a WordPress site hacked through wp2shell?

  Attackers started exploiting the critical wp2shell vulnerability chain within hours of patches being released, putting sites and their visitors at risk.

• New ClickLock Stealer locks your Mac until you hand over your password

  A new macOS infostealer tricks victims into revealing their system password and installs a persistent backdoor for future access.

• Don’t trust that “FBI agent” in your DMs

  The FBI is warning that fraudsters are using fake IC3 accounts and direct messages to target people who've already been scammed.