Millions of cars could be tracked and unlocked by a hidden security flaw
2026-07-23T20:52:03Z•1d4938e91e6d8528090420e580330c5dee5e7d3af810b6dc6cc8cb69fb32f3ad
Adobe-AcrobatAmatera-StealerChick-fil-AChrome-extensionClaudeBleedCrashStealer','account-takeover','phishing','privacy','threat‑adIoTMicrosoft-Patch-TuesdayPaidworkRenPyShadowByt3$Shark-vacuumShinyHuntersWhatsApp-WebWordPressautomotive-securitydata-breachextortioninfostealermacOSmalwarepatchesvulnerabilitywp2shellzero-day
What happened
Malwarebytes Labs published a batch of security and threat reports covering a wide range of active risks: a dealer-installed car-alarm flaw that could let attackers track and unlock vehicles; HermeticReader (Adobe Acrobat Chrome extension) vulnerability exposing WhatsApp Web; widespread WordPress exploitation via the wp2shell chain; a new macOS infostealer (ClickLock) and fake CrashReporter (CrashStealer) targeting Macs; IoT issues including a Shark robot vacuum flaw; large data incidents (Paidwork ~23M, Chick‑fil‑A account takeovers) and extortion claims against Abbott (ShinyHunters, ShadowBy
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 1d4938e91e6d8528090420e580330c5dee5e7d3af810b6dc6cc8cb69fb32f3ad
- Enrichment time
- 2026-07-23T20:52:03Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.