Do Son CISA KEV catalog adds actively exploited Magento flaw CVE-2026-48356 and Brotli vulnerability CVE-2026-111497. Patch before November 10.
Magento
OpenMage fixes 34 OpenMage vulnerabilities in Magento LTS, including a critical CSRF flaw that hands out API tokens. Upgrade to 20.19.0 or 20.18.2.
An Adobe Commerce vulnerability, CVE-2026-75650 (CVSS 10), enables unauthenticated arbitrary code execution and is exploited in the wild. Patch now.
Attackers exploit CVE-2026-71362, an unauthenticated Adobe Commerce account takeover flaw (CVSS 9.1). Details and PoC are public. Patch now.
PolyShell Exposed: Public PoC and active exploitation disclosed for critical Magento RCE. With no official patch, your storefront is at risk. Secure it now!
A 2026 "technological ascension" in web skimming uses WebRTC to steal credit cards via UDP, bypassing CSP and WAF. Five global billion-dollar firms hit.
Active exploitation alert: The PolyShell flaw in the Magento REST API allows unauthenticated RCE via malicious images. Learn how to protect your store now.
"SessionReaper" (CVE-2025-54236) targets Magento stores. Attackers use zombie tokens to gain root access. 200+ sites compromised. Patch now.
Akamai warns of active exploitation of Magento's SessionReaper flaw (CVE-2025-54236). The critical (CVSS 9.8) vulnerability allows session hijacking and unauthenticated RCE via web shells.
Adobe has released an emergency patch for a critical Magento flaw, SessionReaper (CVE-2025-54236). The bug could allow automated attacks against thousands of online stores.
The Mimo threat actor has broadened its scope to Magento, employing advanced persistence, fileless execution, cryptojacking, and proxyjacking in a sophisticated new campaign.
A large-scale supply chain attack has injected backdoors into e-commerce software, potentially affecting 500-1,000 stores. Sansec urges immediate checks.
Learn about browser fingerprinting and its dangers. Understand how attackers use this technique to evade security measures.
Uncover the Magento Credit Card Stealer attacking eCommerce sites. Learn how this stealthy malware hides in tags.
Discover the importance of securing your website from credit card skimming attacks. Explore an incident with Google Tag Manager and learn how to stay safe.
Stay informed about the latest payment fraud trends and threats. Learn about the increase in Magecart e-skimmer infections and check fraud in our comprehensive report.
Discover the latest cyberattack on GroupGreeting.com. Learn about the sophisticated JavaScript injection techniques used in the “zqxq” campaign.
Stay informed about the latest threat to Magento websites: credit card skimmer malware. Learn how it works and how to protect yourself.
Stay updated on the latest Magento security vulnerabilities and learn how to protect your e-commerce platform from potential threats.
a novel attack technique targeting e-commerce websites, where cybercriminals abuse swap files to maintain persistent credit card skimmers
CISA has issued a critical warning, adding three actively exploited vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog
A newly discovered vulnerability dubbed "CosmicSting" (CVE-2024-34102) has sent shockwaves through the e-commerce world