A week in security (August 10 – August 16)
August 17, 2026 · Malwarebytes · Severity: CRITICAL
Last week in cybersecurity, Apple introduced a new feature that alerts iPhone users if they are being targeted by mercenary spyware, providing an extra layer of protection for high-risk individuals. Meanwhile, a dangerous new Android malware strain was discovered that allows criminals to use victims' bank cards in real time, posing a significant financial threat. Microsoft's Patch Tuesday addressed a massive 421 vulnerabilities, including three zero-day exploits, urging users to update their systems promptly to avoid potential attacks. Other notable stories include Zoom's 'Zoomsday' flaws that could let one participant attack another, and a fake CCleaner installer spreading the GhostDesk Chrome spyware. Valve warned Steam hardware buyers about fake delivery scams, while social media platforms cracked down on a drone factory recruiting game. Additionally, WhatsApp is testing a new warning for scam messages to help users avoid phishing attempts. On the legal front, parents filed over 3,000 youth safety lawsuits against Meta, TikTok, Google, and Snap, alleging that these platforms harm children's mental health and privacy. These developments highlight the ongoing battle between cybersecurity threats, platform accountability, and user protection.
Last week on Malwarebytes Labs:
- Apple now uses iPhone alerts for targets of mercenary spyware
- WhatsApp is testing a new warning for scam messages
- New Android malware lets criminals use your bank card in real time
- Parents take on Meta, TikTok, Google, and Snap in 3,000 youth safety lawsuits
- “Zoomsday” flaws could let one Zoom participant attack another
- Patch Tuesday: Update now to fix 421 flaws, including three zero-days
- Fake CCleaner installs GhostDesk Chrome spyware
- Valve warns Steam hardware buyers: Expect fake delivery scams
- Social media platforms crack down on drone factory recruiting game
- Sexual predators targeting online accounts for intimate images, FBI warns
- Love/hate relationship: The AI affair. Young people love AI, but it’s breaking their trust
- Watch out for fake TikTok Shops trying to steal your money
- Fake popular sites offer a free app, instead take over PCs
- How to fake a data trail (and maybe lower prices) (Lock and Code S07E16)
- New turnkey kit makes it easy for anyone to become a scammer
- Edge is dropping older extensions, affecting popular privacy tools
Stay safe!
From reporting threats to removing them.
Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.
Key Takeaways
- Apple now sends iPhone alerts to users targeted by mercenary spyware, enhancing personal security.
- New Android malware enables criminals to use your bank card in real time for fraud.
- Patch Tuesday fixed 421 flaws including three zero-days; immediate updates are strongly recommended.