> A week in security (November 24 – November 30)

Last week on Malwarebytes Labs: How CVSS v4.0 works: characterizing and scoring vulnerabilities Millions at risk after nationwide CodeRED alert system outage and data breach Holiday shoppers targeted as Amazon and FBI warn of surge in account takeover attacks Fake LinkedIn jobs trick Mac users into downloading Flexible Ferret malware New ClickFix wave infects users with hidden malware in images and fake Windows updates WhatsApp closes loophole that let researchers collect data on 3.5B accounts The hidden costs of illegal streaming and modded Amazon Fire TV Sticks Black Friday scammers offer fake gifts from big-name brands to empty bank accounts Matrix Push C2 abuses browser notifications to deliver phishing and malware Stay safe! We don’t just report on threats – we help protect your social media Cybersecurity risks should never spread beyond a headline. Protect your social media accounts by using Malwarebytes Identity Theft Protection.