A week in security (October 13 – October 19)

According to Malwarebytes Labs, a roundup of security news for October 13–19 highlighted several high‑profile incidents and scam trends. Prosper reported on October 17, 2025 that, although no funds or accounts were accessed, the stolen data could still enable targeted phishing and identity theft. On October 16, 2025, Mango disclosed a data breach at a third‑party provider, with limited contact details exposed but no financial data or passwords affected.

Also on October 16, 2025, a misconfigured Kafka broker left video‑call app Huddle01 user logs exposed, undermining user anonymity. Earlier in the week, on October 15, 2025, scammers continued sending fake Robinhood security alerts designed to steal login credentials. The post ties these items to ongoing concerns about data exposure, misconfigurations and phishing scams, underscoring the breadth of risks facing consumers and organisations.