A week in security (September 21

Last week on Malwarebytes Labs: - LinkedIn adds new checks for fake profiles and work histories - Kothamine malware uses Tailscale’s tailcat to evade network detection - Criminals turn placeholder domain into ClickFix trap - That shipping rebate offer may come with a monthly charge - OpenAI agent breached Australian government site, took months to report it - New Browser Guard features add protection before and after you click - Update Chrome: 108 security fixes for desktop, new release for Android - Google’s location data privacy failures draw a €403 million fine - How device code phishing gives scammers access to your account - Fake Claude Max giveaway hides a Google account phishing trap - ShinyHunters claims FBI breach was revenge for “false” report - Some cheap smart glasses are a security disaster - Meta’s Muse AI assistant has a zero-day that can turn it into a Mac backdoor - Researchers used Claude to hack OpenAI - The AI plot to scan and destroy books (Lock and Code S07E19) - The fake sites using a cheap toolkit to sell $2,000 AI subscriptions - Gemini’s breach of real companies exposes an AI guardrail problem - ShinyHunters hacks rival extortion gang and takes over its dark web site Stay safe! From reporting threats to removing them. Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.