mrmustard 0.7.4 Malware: Credential Theft and Cleanup
mrmustard 0.7.4 was a malicious PyPI release that stole developer credentials and left cron, shell, and Python persistence. Check exposure, rotate secrets, and clean the host.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
October 24, 2026
Latest reports
TrickBot Uses DNS Tunneling to Hide Windows C2 Traffic
A current TrickBot variant hides C2 data in DNS queries and persists through a disguised Windows task. Check westurn.in, task actions, ADS streams, and…
Check Point SmartConsole CVE-2026-16232 Exploited: Patch Now
CVE-2026-16232 is under active attack against internet-exposed Check Point management servers. Install the hotfix, restrict access, and check six IoCs.
Adobe Acrobat Extension Flaw Could Expose WhatsApp Web Chats
CVE-2026-48294 in Adobe Acrobat for Chrome could expose rendered WhatsApp Web chats. Check the extension version and linked devices.
Chick-fil-A One Accounts Hit in Credential Stuffing Attack
Chick-fil-A One accounts were accessed with reused passwords. Check rewards and payment settings, then change every account that shared the password.
AWS Kiro Flaw Turned Hidden Web Text Into Code Execution
AWS patched a Kiro IDE flaw that let hidden web text rewrite mcp.json and run commands without approval. Update Kiro and check MCP configurations…
HOLLOWGRAPH Malware Hides in Microsoft 365 Calendar Events
HOLLOWGRAPH uses Microsoft 365 calendar events dated 2050 for command-and-control and file theft. Check Graph activity, logAzure.txt, and DNS telemetry.
NGINX CVE-2026-42533: Check Regex Maps and Update Now
CVE-2026-42533 affects NGINX map directives with regex captures. Check the exposure pattern and update to 1.30.4 or 1.31.3.
UAC-0145 Uses Fake CAPTCHA and Security Apps Against Ukraine
CERT-UA says UAC-0145 is using ClickFix pages, fake security tools, Signal lures, and Android malware against Ukrainian targets. Check the exact files, paths, and…