A week in security (January 5 – January 11)

According to Malwarebytes Labs, the week of January 5 to January 11 was recapped in a post dated January 12, 2026, highlighting a mix of investigations and warnings. The round-up includes pcTattletale founder pleads guilty in a US stalkerware case, a piece on ChatGPT Health and its privacy implications, and CISA warnings of active attacks on HPE OneView and legacy PowerPoint.

It also features lighter but instructive items such as Lego’s Smart Bricks explained, and warnings about fake WinRAR downloads hiding malware behind a real installer. Other notable entries report that one million customers are on alert as an extortion group claims a massive Brightspeed data haul, a phishing campaign abusing Google Cloud to steal Microsoft 365 logins, and Disney facing a $10m fine for mislabeling kids’ YouTube videos and violating privacy law. The week closes with coverage of ALPRs recording daily drives and Grok apologising for creating an image of young girls in “sexualized attire.”