CriticalBreach
A week in security (November 2 – November 8)
Malwarebytes Labs·Source published ·1 min read
What happened?
Last week on Malwarebytes Labs: Big Tech sues over California plan to limit kids’ scrolling Attacks on supermarket and blood storage systems prompt US warning Phone return scams: where a real delivery and a fake return end up in a bill for you NIKKE PC launcher compromise put players’ passwords and personal files at risk Scammers use AI-generated images of missing pets to extort owners Vizio, Samsung smart TVs seem to ignore tracking opt outs The fake $750 Apple Cash reward that pays out nothing mSecure tells users to change passwords but won’t say why [updated] Chrome 157 fixes 213 security i…
Key details
- Big Tech companies are suing California over a plan to limit children's social media scrolling.
- Attacks on supermarket and blood storage systems led to a US government warning.
- Phone return scams combine real deliveries with fake returns to bill victims.
- NIKKE PC launcher compromise exposed players' passwords and personal files.
- Scammers use AI-generated images of missing pets to extort owners.
- Vizio and Samsung smart TVs appear to ignore user tracking opt-out settings.
- A fake $750 Apple Cash reward scam pays out nothing to victims.
Affected
- NIKKE PC launcher users had passwords and personal files at risk.
- Vizio and Samsung smart TVs may ignore tracking opt-out preferences.
- Revolve card breach may affect 1.5 million people.
- Applebee's customer data exposed due to password left in app.
- Hidden backdoor put 1.3 million TV boxes to work for criminals.
Fixes and mitigations
- Chrome 157 fixes 213 security issues including 7 critical flaws.
What to look for
- Fake review trade operates underground selling 5-star ratings.
Summarised by SecOraLens from Malwarebytes Labs. Always read the original source before acting. How SecOraLens verifies advisories.