This Week in Security: ASOS Breach Update, Phishing Tools and Security Updates

Summary

A Malwarebytes weekly roundup covers an ASOS customer-data breach update, phishing and credential-stuffing attacks, Android and Chrome security updates, an arrest linked to ShinyHunters, and other security and privacy developments.

Key points

The roundup says hackers stole ASOS customer details and shopping searches; a separate headline reports push notifications sent to customers.
Attackers are reportedly hijacking country-code domains to impersonate Google and other services.
An AI-powered phishing kit can reportedly equip criminals with account-hijacking tools in 10 minutes.
Google issued Android security updates and Chrome and ChromeOS updates to fix critical security issues.
A suspect linked to ShinyHunters was arrested.
Domino’s customers were targeted in credential-stuffing attacks, and a Facebook Marketplace scam used victims’ names and phone numbers.
Google paused its open-source bug bounty program amid a rise in AI submissions; the roundup also flags proposed anti-Flock bills affecting license plate readers.

Article Details

Event Type: Weekly cybersecurity news roundup covering breaches, scams, phishing, credential attacks, security updates, and policy developments.
Impact: The roundup reports that ASOS customers had details and shopping searches stolen, customers received push notifications from alleged hackers, and Domino’s customers were targeted in credential-stuffing attacks. It also mentions scams, account-hijacking tools, security updates, and other security-related developments; further impact details are not provided.