The fajitas purveyor announced the point-of-sale payment-card breach on Friday May 11, the same day that it learned about it.

The leak of point-of-sale malware source code is a double-edge sword to researchers who view it as boon to research, but a headache when it comes to inspiring future variants and attacks.

Oracle has issued a fix, but many Micros systems could still be vulnerable.

The Carbanak cybercrime gang has shifted strategy and targets the hospitality and restaurant industries with new techniques and malware.