A week in security (June 29 – July 5)
2026-07-06T08:51:56Z•510d2f57a93fe7b2ac45e73de3d1ac2cb1de90d24c4f0c6046dcd932c21caa1a
ai‑abuseapple‑hide‑my‑emailbrowser‑vulnerabilitieschromeclickfixconsentfixcredential‑theftdata‑exposureedge‑extensionsfake‑domain‑renewalsfake‑extensionsffmpeginfostealermac‑malwaremalware‑loaderphishingscamssession‑hijackingsocial‑engineeringwinrar
What happened
Malwarebytes roundup (late June–early July 2026) covering multiple active threats and high‑risk vulnerabilities: large Chrome security updates (hundreds of fixes across multiple advisories, including numerous critical issues), a critical FFmpeg "PixelSmash" flaw, a WinRAR remote‑code vulnerability, and Apple browser/OS patches. Threat reporting highlights social engineering and web‑based delivery (ClickFix campaigns using fake Google/Cloudflare verification pages, Verified X ad distributing mac malware, ConsentFix stealing Microsoft accounts), malicious/rogue browser extensions (fake Perplexi
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- malwarebytes_labs
- Record identifier
- 510d2f57a93fe7b2ac45e73de3d1ac2cb1de90d24c4f0c6046dcd932c21caa1a
- Enrichment time
- 2026-07-06T08:51:56Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.