MALWAREBYTES Labs’ weekly round-up covers stories published between 12 and 18 October 2026. It highlights security and privacy issues involving consumer devices, online services and organisations, alongside scams and emerging risks linked to artificial intelligence.
Among the stories listed, researchers found that flaws in the Eiliko robot companion could expose private conversations and let attackers remotely change what it says. Google released fixes for 37 Chrome security flaws, including seven rated critical. Microsoft’s October Patch Tuesday included a fix for a Windows vulnerability that was already under attack.
Other reports covered fake Calendly pages posing as Meta careers sites to steal Facebook and Google logins, and hackers raising supermarket fridge temperatures in France, spoiling food.
The round-up also included warnings that AI worms could spread between smart devices, phishing emails designed to manipulate AI assistants, and a report alleging that Grindr users’ sensitive data was shared through advertising auctions without valid consent. It listed an FTC allegation that a sextortion “help” firm took $60 million from victims, and a report that almost nine million personal records were exposed after “123456” was used as a password. The source provides headlines and links rather than details of the incidents, evidence or recommended responses.