Sansec

PolyShell Exposed: Public PoC and Active Exploitation Disclosed for Critical Magento RCE as Automated Attacks Surge

• Vulnerability

PolyShell Exposed: Public PoC and Active Exploitation Disclosed for Critical Magento RCE as Automated Attacks Surge

Do Son April 1, 2026 0

Magento remains a titan in the e-commerce space, currently “estimated to be running on more than 130,000...

Read More Read more about PolyShell Exposed: Public PoC and Active Exploitation Disclosed for Critical Magento RCE as Automated Attacks Surge

The Stealth Skimmer: How Hackers Weaponized WebRTC to Bypass PCI Security and Siphon Credit Cards

• Vulnerability Report

The Stealth Skimmer: How Hackers Weaponized WebRTC to Bypass PCI Security and Siphon Credit Cards

Do Son March 30, 2026 0

When we complacently believed that the checkout portals of e-commerce bastions were enveloped in impenetrable armor, the...

Read More Read more about The Stealth Skimmer: How Hackers Weaponized WebRTC to Bypass PCI Security and Siphon Credit Cards

PolyShell Alert: Critical Magento REST API Vulnerability Faces Massive Global Exploitation in the Wild

• Vulnerability Report

PolyShell Alert: Critical Magento REST API Vulnerability Faces Massive Global Exploitation in the Wild

Do Son March 24, 2026 0

A critical security flaw in the Magento REST API is currently being weaponized by cybercriminals to hijack...

Read More Read more about PolyShell Alert: Critical Magento REST API Vulnerability Faces Massive Global Exploitation in the Wild

Keylogger Found Harvesting Credentials on Top US Bank’s Employee Store

• Malware

Keylogger Found Harvesting Credentials on Top US Bank’s Employee Store

Do Son January 17, 2026 0

Security researchers at Sansec have discovered an active keylogger planted on the employee merchandise store of a...

Read More Read more about Keylogger Found Harvesting Credentials on Top US Bank’s Employee Store

Adobe Issues Emergency Patch for SessionReaper (CVE-2025-54236), One of Magento’s Most Critical Flaws

• Vulnerability Report

Adobe Issues Emergency Patch for SessionReaper (CVE-2025-54236), One of Magento’s Most Critical Flaws

Do Son September 9, 2025 0

Adobe has broken from its regular patch schedule to release an emergency fix for CVE-2025-54236, a vulnerability...

Read More Read more about Adobe Issues Emergency Patch for SessionReaper (CVE-2025-54236), One of Magento’s Most Critical Flaws

Massive E-commerce Supply Chain Attack Uncovered: Hundreds of Stores at Risk

• Malware

Massive E-commerce Supply Chain Attack Uncovered: Hundreds of Stores at Risk

Do Son May 6, 2025 0

The Sansec Forensics Team has uncovered a coordinated supply chain attack that has silently infected ecommerce infrastructure...

Read More Read more about Massive E-commerce Supply Chain Attack Uncovered: Hundreds of Stores at Risk