← Back to Feed
A week in security (September 28 – October 4)
October 5, 2026 · Malwarebytes · Severity: CRITICAL
This article summarizes the week's top cybersecurity stories from Malwarebytes Labs, covering crypto scams, shadow AI, a Pentagon data breach, and more. It also includes updates on phishing, privacy issues, and critical software patches. 📌 **Analyst Note:** The breadth of threats this week underscores the need for continuous monitoring and user education; the Pentagon breach and shadow AI articles are particularly relevant for enterprise security teams.
Last week on Malwarebytes Labs:
- Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
- Shadow AI explained: The work shortcut that could leak your company’s secrets
- Convincing Free Mobile phishing emails appear after data breach
- Malwarebytes earns another Top Product award in independent testing
- Pentagon breach exposes Social Security numbers and military records of millions
- Losing gamblers pushed to bet more by DraftKings’ AI, report says
- Hackers steal protective order and foster care records from Arizona courts
- Your car’s app could be telling Big Tech who you are and where you go
- Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home
- Update your iPhone, iPad, or Mac: Flaw could run attackers’ code
- Fake iPhone Duo preorder scam triggers DarkSword attack
- Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
- OpenAI pauses work on top AI models after agent slips past internet controls
- FBI agents’ blood tests and doctors’ notes surface after breach
Stay safe!
Scammers know more about you than you think.
Malwarebytes Mobile Security protects you from phishing, scam texts, malicious sites, and more. With real-time AI-powered Scam Guard built right in.
Key Takeaways
- This week's security news includes fake crypto reward sites, shadow AI risks, and a Pentagon breach exposing millions of records including Social Security numbers.
- Other highlights involve phishing attacks after data breaches, AI-driven gambling pressure, and car app privacy concerns that track user location and habits.
- The roundup also covers court data theft, Meta's AI sending a buyer to a seller's home, and urgent Apple device updates to patch code execution flaws.