THIS week's security updates from Malwarebytes Labs cover various cybersecurity threats and incidents from February 23 to March 1, 2026. Key highlights include:
1. Potential exposure of Gemini AI data due to public Google API keys.
2. Analysis of scams involving fake Google security checks that install browser Remote Access Trojans (RATs).
3. Technical deep dive into scams impersonating Zoom and Google Meet that lead to unauthorized installations of monitoring tools.
4. Understanding and avoiding Advanced Persistent Threats (APTs).
5. The growing impact of the Conduent data breach affecting millions.
6. Instagram's delayed response to safety features for minors despite initial flags in 2018.
7. Development of an app to detect nearby smart glasses.
8. Regulatory actions against Reddit and pornographic sites concerning children's safety.
9. Roblox's platform criticized for providing tools that may facilitate predatory behavior.
10. Refund scams impersonating Avast to steal financial information.
Overall, the week highlights significant vulnerabilities, regulatory challenges, and ongoing threats in the cybersecurity landscape.