A week in security (November 24 – November 30)
A list of topics we covered in the week of November 24 to November 30 of 2025
Last week on Malwarebytes Labs:
- How CVSS v4.0 works: characterizing and scoring vulnerabilities
- Millions at risk after nationwide CodeRED alert system outage and data breach
- Holiday shoppers targeted as Amazon and FBI warn of surge in account takeover attacks
- Fake LinkedIn jobs trick Mac users into downloading Flexible Ferret malware
- New ClickFix wave infects users with hidden malware in images and fake Windows updates
- WhatsApp closes loophole that let researchers collect data on 3.5B accounts
- The hidden costs of illegal streaming and modded Amazon Fire TV Sticks
- Black Friday scammers offer fake gifts from big-name brands to empty bank accounts
- Matrix Push C2 abuses browser notifications to deliver phishing and malware
Stay safe!
We don’t just report on threats – we help protect your social media
Cybersecurity risks should never spread beyond a headline. Protect your social media accounts by using Malwarebytes Identity Theft Protection.
What's Your Reaction?
