Friday, September 25, 2026

AI agents ran a card-skimming spree on online shops: 600,000 cards, about $25 a victim

Gambit Security recovered an attacker's staging server: three open-source AI agents broke into 27 companies in five days, stole 600,000+ card records and planted skimmers on 100+ sites.