A week in security (October 6 – October 12)

A week in security (October 6 – October 12) rounds up several notable Malwarebytes Labs stories from early October 2025, with the piece posted on 13 October 2025. It highlights multiple items from 10 October, including Apple voices concerns over age-check law that could put user privacy at risk and Your passwords don’t need so many fiddly characters, NIST says, as well as the report that Millions of (very) private chats exposed by two AI companion apps.

The roundup also covers Fake VPN and streaming app drops malware that drains your bank account (Mobdro Pro IP TV + VPN hides Klopatra, a new Android Trojan that lets attackers steal banking credentials) and California just put people back in control of their data (California just passed 14 new privacy and AI laws). According to Malwarebytes Labs, these stories illustrate ongoing privacy and credential-security concerns facing consumers and organisations alike.