A week in security (March 16 – March 22)

A week in security covers March 16 to March 22, with Malwarebytes Labs compiling a round-up published on March 23, 2026. According to Malwarebytes Labs, the week included reports such as NYC lawmakers seeking limits on biometric tracking, a warning that a Google Forms job brief could infect devices, and notes that a DarkSword campaign targeted unpatched iPhones. The roundup also highlights that tax forms sell for $20 on the dark web and that researchers found a font-rendering trick to hide malicious commands.

Other items include Apple patching a WebKit bug that could let sites access data, a network of more than 20,000 fake shops, and a piece on Vidar infostealer delivered by hacked sites to Windows users. The week also covers a zombie ZIP method that can fool antivirus on the first scan and the reminder that deleting data doesn’t necessarily mean it’s gone.