Google has released a new update for the Chrome browser and ChromeOS. There are a lot of security fixes in them so don’t delay.
Category: Malwarebytes
ASOS “hackers” send push notifications to customers
ASOS customers received a push notification regarding a breach of the company. Here’s what we know so far.
Domino’s customers targeted in credential stuffing attacks
Domino’s is warning customers by email that their accounts have been compromised in a credential stuffing attack.
Facebook Marketplace scam uses your name and number
Facebook users are reporting receiving a message with a fake Facebook Marketplace listing that has their name as the seller.
Google pauses open source bug bounty program after rise in AI submissions
Google has frozen its OSS VRP product vulnerability submissions to stop the flood of AI generated vulnerability reports.
Proposed anti-Flock bills could spell trouble for license plate readers
Two sets of US lawmakers introduced bills in late September and early October to tackle the growing concerns about automated license plate readers.
A week in security (September 28 – October 4)
A list of topics we covered in the week of September 28 to October 4 of 2026
Shadow AI explained: The work shortcut that could leak your company’s secrets
An AI shortcut can send confidential work data beyond your company’s control. Here’s how to get the benefits without taking unnecessary risks.
Pentagon breach exposes Social Security numbers and military records of millions
Social Security numbers and other personal details of military personnel and their families were exposed in a months-long Pentagon breach.
Malwarebytes earns another Top Product award in independent testing
Three independent labs, three standout results: a perfect score, top certification, and every threat stopped before it ran.
Losing gamblers pushed to bet more by DraftKings’ AI, report says
Betting site DraftKings has been accused of using AI to target gamblers likely to lose more after receiving promotions. The company disputes the findings.
Hackers steal protective order and foster care records from Arizona courts
Attackers copied sensitive court records, including more than 150,000 foster care reports, raising privacy and safety concerns for those Arizonans…
Convincing Free Mobile phishing emails appear after data breach
Free Mobile customers received very convincing phishing emails after major data breach.
Your car’s app could be telling Big Tech who you are and where you go
Who you are and where you live, work, and seek medical care could be revealed by data your car’s app shares with trackers.
Meta’s Muse sent a Facebook Marketplace buyer to a seller’s home
A buyer chatted and negotiated with Muse, which shared the seller’s address and arranged a pickup. The seller knew nothing about it.
Fake iPhone Duo preorder scam triggers DarkSword attack
A fake iPhone Duo preorder page promises a $500 voucher. Open it on a vulnerable iPhone, and it tries to break in before you fill out the form.
Update your iPhone, iPad, or Mac: Flaw could run attackers’ code
A malicious file could trigger the vulnerability. Apple says it may already have been used against iPhone users.
Fake xStocks, Pendle, and other sites bait crypto users with rewards votes
More than 70 fake crypto sites promise extra rewards for casting a vote, then prompt visitors to connect their wallets.
Humans are reviewing Copilot users’ bizarre and abusive image-editing requests
Copilot users asked for upskirt images and sexualized edits of people in uploaded photos. Human contractors were asked to judge the results.
Shadow AI explained: The work shortcut that could leak your company’s secrets
An AI shortcut can send confidential work data beyond your company’s control. Here’s how to get the benefits without taking unnecessary risks.