A week in security (September 21 – September 27)

Malwarebytes Labs’ September 21–27, 2026 roundup covers active cybercrime and security issues including Kothamine malware using Tailscale tailcat for encrypted command and control, ClickFix PowerShell delivery, device-code and credential phishing, fake subscription scams, extortion activity by ShinyHunters, vulnerable smart glasses, an AI assistant zero-day enabling Mac backdoor access, browser security updates, and AI-agent guardrail failures. The most operationally significant items are malware evasion through legitimate remote-access infrastructure, social engineering that induces users to-