A week in security (October 19 – October 25)
2026-10-26T08:51:45Z•3373d883497f8e6e9b5fc6fa218101d38d1f08fc725ed2d274b3c695e9bb8389
AOMEI-BackupperCAPCOMMetaPHPSignalcredential-theftdata-breacheducational-dataidentity-theftmalware-distributionphishingprivacyremote-code-executionsecurity-newssocial-engineeringsupply-chain-compromise
What happened
Malwarebytes Labs weekly feed covering security and privacy news from October 19–25, 2026. Key items include a supply-chain compromise of AOMEI Backupper update servers used to distribute malware, two critical PHP vulnerabilities enabling remote code execution, phishing campaigns targeting YouTube creators through a fake Amazon Music portal, major data breaches affecting CAPCOM users and California students, and privacy flaws involving Signal calls, Meta smart glasses, delivery robots, WhatsApp, and an Eiliko robot companion.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 3373d883497f8e6e9b5fc6fa218101d38d1f08fc725ed2d274b3c695e9bb8389
- Enrichment time
- 2026-10-26T08:51:45Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.