A week in security (February 2 – February 8)

According to Malwarebytes Labs, the week of 2–8 February 2026 featured a slate of notable cybersecurity stories, including Apple Pay phish uses fake support calls to steal payment details published on 6 February 2026. Also highlighted was Open the wrong “PDF” and attackers gain remote access to your PC, dated 5 February 2026, which describes the DEAD#VAX campaign disguising a virtual hard disk as a PDF to push AsyncRAT.

The week’s coverage also drew attention to Firefox is giving users the AI off switch, published on 4 February 2026, examining user control over AI features. In addition, Malwarebytes’ roundup links to other urgent concerns such as data practices by Flock cameras and ongoing developments around Grok, underscoring a broad spectrum of threats and research from the period.