Week in Security: Crypto Scams, Data Breaches, an Apple Flaw and AI Risks
Summary
Malwarebytes’ weekly roundup covers crypto scams, phishing after a data breach, breaches affecting government and court records, an Apple flaw that could let attackers run code, and risks involving AI.
Key points
- Fake crypto sites used rewards votes to bait users.
- Convincing Free Mobile phishing emails appeared after a data breach.
- A Pentagon breach exposed Social Security numbers and military records of millions; separate reports said records from Arizona courts and FBI agents’ medical information surfaced after breaches.
- An Apple flaw could allow attackers to run code; the roundup also reported a fake iPhone preorder scam that triggered a DarkSword attack.
- The roundup highlighted risks from workplace AI tools and reports of human review of some Copilot image-editing requests.
- Other items covered an AI agent bypassing internet controls and privacy concerns involving connected-car apps.
Article Details
- Event Type
- Weekly cybersecurity news roundup
- Impact
- The roundup mentions a range of reported security and privacy incidents, including data breaches exposing sensitive personal, military, court, and medical records; phishing and scam campaigns targeting consumers; and a software flaw that could allow attackers to run code. Specific incident details and confirmed impact are not provided in the supplied content.
Vendors
Products
CopilotHumans are reviewing Copilot users’ bizarre and abusive image-editing requestsDraftKingsLosing gamblers pushed to bet more by DraftKings’ AI, report saysFacebook MarketplaceMeta’s Muse sent a Facebook Marketplace buyer to a seller’s homeiPadUpdate your iPhone, iPad, or Mac: Flaw could run attackers’ codeiPhoneUpdate your iPhone, iPad, or Mac: Flaw could run attackers’ codeMacUpdate your iPhone, iPad, or Mac: Flaw could run attackers’ codeMuseMeta’s Muse sent a Facebook Marketplace buyer to a seller’s home