> A week in security (February 23 – March 1)

Last week on Malwarebytes Labs: Public Google API keys can be used to expose Gemini AI data Inside a fake Google security check that becomes a browser RAT Fake Zoom and Google Meet scams install Teramind: A technical deep dive How to understand and avoid Advanced Persistent Threats The Conduent breach; from 10 million to 25 million (and counting) Instagram flagged explicit messages to minors in 2018. Image-blurring arrived six years later Developer creates app to detect nearby smart glasses Reddit, porn sites fined by UK regulators over children’s safety and privacy Roblox gives predators “powerful tools” to target children, says LA County Fake Zoom meeting “update” silently installs unauthorized version of monitoring tool abused by cybercriminals to spy on victims Refund scam impersonates Avast to harvest credit card details OpenClaw: What is it and can you use it safely? Password managers keep your passwords safe, unless… Fake Huorong security site infects users with ValleyRAT What can’t you say on TikTok? Stay safe! We don’t just report on threats—we remove them Cybersecurity risks should never spread beyond a headline. Keep threats off your devices by downloading Malwarebytes today.