A week in security (July 27 – August 2)

Last week on Malwarebytes Labs: Fake Fortnite rewards are stealing players’ accounts Fake Flash Player installs AtlasRAT Malwarebytes for Windows, now available on the Microsoft Store Hims & Hers sued over alleged health data privacy failures Hidden prompt turns Microsoft Copilot into an AI worm...

EUVD-2025-22899

Malicious code in bioql PyPI...

CVE-2025-54569

CVE-2025-54569 affects Malwarebytes Binisoft Windows Firewall Control: the installer prior to version 6.16.0.0 is vulnerable to local privilege escalation. The issue is documented across multiple sources (NVD/Red Hat/CIRCL) with the same vulnerability description. Practical impact is a local elev...