> A week in security (December 8 – December 14)

Last week on Malwarebytes Labs: The US digital doxxing of H-1B applicants is a massive privacy misstep Google ads funnel Mac users to poisoned AI chats that spread the AMOS infostealer How private is your VPN? DroidLock malware locks you out of your Android device and demands ransom Malwarebytes for Mac now has smarter, deeper scans [updated]Another Chrome zero-day under attack: update now December Patch Tuesday fixes three zero-days, including one that hijacks Windows devices GhostFrame phishing kit fuels widespread attacks against millions Prompt injection is a problem that may never be fixed, warns NCSC EU fines X $140m, tied to verification rules that make impostor scams easier Deepfakes, AI resumes, and the growing threat of fake applicants How phishers hide banking scams behind free Cloudflare Pages Scammers harvesting Facebook photos to stage fake kidnappings, warns FBI On the ThreatDown blog: Tracking remote ransomware attacks at their source Stay safe! We don’t just report on threats—we help safeguard your entire digital identity Cybersecurity risks should never spread beyond a headline. Protect your, and your family’s, personal information by using identity protection.