> A week in security (March 9 – March 15)

Last week on Malwarebytes Labs: Watch out for fake Malwarebytes renewal notices in your calendar Google patches two Chrome zero-days under active attack. Update now Attackers impersonate Temu in ClickFix $Temu airdrop scam Apple patches Coruna exploit kit flaws for older iOS versions This Android vulnerability can break your lock screen in under 60 seconds Microsoft Authenticator could leak login codes—update your app now Meta rolls out anti-scam tools across WhatsApp, Facebook, and Messenger Phishers hide scam links with IPv6 trick in “free toothbrush” emails Sextortion “I recorded you” emails reuse passwords found in disposable inboxes Watch out for tax-season robocalls pushing fake “relief programs” March 2026 Patch Tuesday fixes two zero-day vulnerabilities How to see your Google Search history (and delete it) Signal and WhatsApp accounts targeted in phishing campaign Hackers may have breached FBI wiretap network via supply chain Fake Claude Code install pages hit Windows and Mac users with infostealers Quiz sites trick users into enabling unwanted browser notifications Stay safe! We don’t just report on scams—we help detect them Cybersecurity risks should never spread beyond a headline. If something looks dodgy to you, check if it’s a scam using Malwarebytes Scam Guard. Submit a screenshot, paste suspicious content, or share a link, text or phone number, and we’ll tell you if it’s a scam or legit. Available with Malwarebytes Premium Security for all your devices, and in the Malwarebytes app for iOS and Android.