A week in security (December 15 – December 21)_MALWAREBYTES:36A3173F3A2FB800FB3C7F954BEBE383

{
    "lastseen": "2025-12-22T10:05:10",
    "description": "Last week on Malwarebytes Labs:\n\n  * CISA warns ASUS Live Update backdoor is still exploitable, seven years on\n  * The ghosts of WhatsApp: How GhostPairing hijacks accounts\n  * Chrome extension slurps up AI chats after users installed it for privacy\n  * Two Chrome flaws could be triggered by simply browsing the web: Update now\n  * Inside a purchase order PDF phishing campaign\n  * SoundCloud, Pornhub, and 700Credit all reported data breaches, but the similarities end there\n  * Android mobile adware surges in second half of 2025\n  * Photo booth flaw exposes people\u2019s private pictures online\n  * Google is discontinuing its dark web report: why it matters\n  * Pig butchering is the next \"humanitarian global crisis\" (Lock and Code S06E25)\n  * PayPal closes loophole that let scammers send real emails with fake purchase notices\n\n\n\nOn the ThreatDown blog:\n\n  * AI-orchestrated cyberattacks\n\n\n\nStay safe!\n\n* * *\n\n**We don 't just report on threats\u2014we help safeguard your entire digital identity**\n\nCybersecurity risks should never spread beyond a headline. Protect your, and your family's, personal information by using identity protection.",
    "published": "2025-12-22T08:07:00",
    "modified": "2025-12-22T08:07:00",
    "type": "malwarebytes",
    "title": "A week in security (December 15 – December 21)",
    "source": "",
    "references": "",
    "id": "MALWAREBYTES:36A3173F3A2FB800FB3C7F954BEBE383",
    "bulletinFamily": "blog",
    "cwe": null,
    "cvelist": [],
    "sourceData": "",
    "sourceHref": "",
    "cvss": {
        "score": 0,
        "severity": "NONE",
        "vector": "NONE",
        "version": "NONE"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "https://www.malwarebytes.com/blog/news/2025/12/a-week-in-security-december-15-december-21",
    "category_name": "News",
    "post_link": "",
    "product": "",
    "version": "",
    "vendor": "",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}