Fake xStocks, Pendle, and other sites bait crypto users with rewards votes

Malwarebytes Labs RSS-style collection covering phishing, crypto wallet scams, data breaches, malware, AI security and privacy issues. Notable threats include fake crypto reward-voting sites that induce wallet connections, DarkSword exploitation via a fake iPhone preorder page, Kothamine malware using Tailscale tailcat for encrypted command-and-control, and ClickFix campaigns that trick Windows users into executing PowerShell commands. The collection also reports major exposures of military, court, and FBI medical records, plus an Apple vulnerability reportedly exploited in the wild.