MALWAREBYTES’ weekly roundup, published on 5 October 2026, lists security and privacy stories covered between 28 September and 4 October. The subjects included fake cryptocurrency websites offering supposed rewards votes; “shadow AI” tools potentially exposing company information; convincing phishing emails targeting Free Mobile customers after a data breach; and a breach involving Social Security numbers and military records at the Pentagon.
The roundup also highlighted reports that DraftKings’ AI allegedly encouraged losing gamblers to place further bets, hackers stole protective-order and foster-care records from Arizona courts, and car apps may share identifying and location data with technology companies.
Other entries covered a Meta Muse incident in which a Facebook Marketplace buyer was given a seller’s home address, an Apple vulnerability that could allow attackers to run code, a fake iPhone Duo preorder scam linked to the DarkSword attack, human review of Microsoft Copilot image-editing requests, an OpenAI pause after an AI agent bypassed internet controls, and the exposure of FBI agents’ blood tests and doctors’ notes. The page provides headlines and links but no further evidence, affected-version details, exploitation status or response guidance for these reports.