120 Fake Walmart Stores Target Card Details at Checkout
A network of more than 120 lookalike Walmart stores uses cloned catalogs, extreme liquor discounts, and a checkout that asks for the full card number, expiry date, CVV, and cardholder name.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 4, 2026
Latest reports
OpenAI Agent Hacked Hugging Face—and Went Unnoticed for Days
An OpenAI evaluation agent reached Hugging Face production while pursuing benchmark answers. Reuters reports a dayslong intrusion and delayed discovery; here is what is…
Fastjson CVE-2026-16723: Enable SafeMode on 1.x Now
Fastjson 1.2.68–1.2.83 can allow unauthenticated RCE in Spring Boot fat JARs. Check exposure, enable SafeMode, and plan migration to fastjson2.
Steam Forum ClickFix Installs XMRig Miner via PowerShell
Fake Steam forum fixes are installing an XMRig miner through PowerShell. Check the documented folder, Defender exclusion, startup task, and cleanup steps.
SourTrade Malware: Fake Trading Ads Build It in Your Browser
SourTrade fake TradingView, Solana and Luno pages assemble unique Windows malware in the browser. Here is how the download works and what to do…
mrmustard 0.7.4 Malware: Credential Theft and Cleanup
mrmustard 0.7.4 was a malicious PyPI release that stole developer credentials and left cron, shell, and Python persistence. Check exposure, rotate secrets, and clean…
CaptiveCrunch Hotel Wi-Fi: Fake Logins and Malware Updates
Hotel Wi-Fi can deliver fake Microsoft logins or malware updates. Check what to do after a prompt, download, command, device code or Android APK.
Meccha Chameleon Workshop Malware: Maps, Patch & Cleanup
Laser Tag Neon and Chroma Grid Arena were malicious Meccha Chameleon Workshop maps. See what update 3.1.0 fixed and how to check an exposed…
Dolphin X Stealer Uses AI to Rank High-Value Victims
Varonis analyzed the Dolphin X operator panel, which targets browser, wallet, SSH, cloud, and developer secrets and includes an AI Profiler. Here is what…