OVER the week of 5–11 October 2026, Malwarebytes Labs ran through a handful of security developments affecting consumers and organisations. The digest highlights a mix of data breaches, credential-stuffing activity, impersonation schemes, AI-driven threat tools, and policy or update news, giving readers a rapid view of notable incidents and trends observed during the period.
Among the items, the ASOS breach update is noted for exposing that hackers stole customer details and shopping searches, signalling phishing and recon risks for affected shoppers. Other stories focus on attackers hijacking country-code domains to impersonate trusted services such as Google, and a separate look at Amazon constructing an increasingly personal profile of users.
The week also covers Meta’s Muse AI storing user friendships and private interactions, plus practical updates from Google about Android security patches and who can receive them. Additional reporting points to the emergence of an AI-powered phishkit enabling rapid creation of account-hijacking tools, and the need to update Chrome and ChromeOS to address critical issues.
The roundup also notes law-enforcement progress with another arrest linked to ShinyHunters, reports of ASOS pushing notifications to customers, a Facebook Marketplace phishing scheme using personal identifiers, and credential-stuffing attacks targeting Domino’s customers. Finally, there are separate notes on Google pausing its open-source bug-bounty programme amid rising AI submissions and proposed anti-FLOCK bills that could affect license-plate reader use.