SvcHostUpdate.exe in Startup: The MythicalsGames Backdoor
SvcHostUpdate.exe in Windows Startup matches a malicious web3-token-helper chain. Learn what the file proves, what to preserve, how to clean the PC, and which secrets to rotate.
News desk
Security News
Security incidents, exploited vulnerabilities, breach reports, malware campaigns, and urgent patch notes arranged for fast daily scanning.
September 13, 2026
Latest reports
Operation BlueDash Uses Fake Teams Updates for Remote Access
Operation BlueDash turns a secure-document email into a fake Teams update that installs Level RMM and ScreenConnect. Check your exposure state and remove every…
CVE-2026-16812 Exploited in VeloCloud Orchestrator
Arista confirms active exploitation of CVE-2026-16812 in VeloCloud Orchestrator On-Prem. Check affected releases, observed IPs, log clues, and the patch-versus-rebuild decision.
MedusaHVNC Hijacks Browser Sessions on a Hidden Desktop
BlackFog analyzed MedusaHVNC, a Windows RAT that opens a browser on an invisible desktop and can use existing logged-in sessions. Check the five-stage chain,…
OpenAI Agent Hacked Hugging Face—and Went Unnoticed for Days
An OpenAI evaluation agent reached Hugging Face production while pursuing benchmark answers. Reuters reports a dayslong intrusion and delayed discovery; here is what is…
Fastjson CVE-2026-16723: Enable SafeMode on 1.x Now
Fastjson 1.2.68–1.2.83 can allow unauthenticated RCE in Spring Boot fat JARs. Check exposure, enable SafeMode, and plan migration to fastjson2.
Steam Forum ClickFix Installs XMRig Miner via PowerShell
Fake Steam forum fixes are installing an XMRig miner through PowerShell. Check the documented folder, Defender exclusion, startup task, and cleanup steps.
SourTrade Malware: Fake Trading Ads Build It in Your Browser
SourTrade fake TradingView, Solana and Luno pages assemble unique Windows malware in the browser. Here is how the download works and what to do…
mrmustard 0.7.4 Malware: Credential Theft and Cleanup
mrmustard 0.7.4 was a malicious PyPI release that stole developer credentials and left cron, shell, and Python persistence. Check exposure, rotate secrets, and clean…