56,966 blogs · [ { "id": "01a0e457-b4f2-725c-9b90-3f671d4df32f", "title": "Brevo supply chain attack hits 100k+ sites with Wordpress backdoors and Clickfix malware", "url": "https://sansec.io/research/brevo-supply-chain-attack", "published_at": "2026-09-16T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f671dcc2043", "title": "StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack", "url": "https://sansec.io/research/stylesmuggler-0day", "published_at": "2026-09-05T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f671df6f74c", "title": "Shopware fixes Store API vulnerability allowing administrator takeover", "url": "https://sansec.io/research/shopware-fixes-store-api-admin-takeover-vulnerability", "published_at": "2026-08-25T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f671e94e154", "title": "Adobe patches critical Magento account takeover (APSB26-92)", "url": "https://sansec.io/research/adobe-commerce-account-takeover-apsb26-92", "published_at": "2026-08-11T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f671f3881ea", "title": "Amasty patches dozens of Magento extensions, 2 critical", "url": "https://sansec.io/research/amasty-mass-disclosure", "published_at": "2026-07-02T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67202fe1d8", "title": "Unauthenticated remote code execution in JTL Shop", "url": "https://sansec.io/research/jtl-shop-ssti-rce", "published_at": "2026-06-17T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672097e3fe", "title": "OptinMonster supply chain attack hits 1.2 million sites", "url": "https://sansec.io/research/optinmonster-supply-chain-attack", "published_at": "2026-06-13T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67218c7c5f", "title": "Unauthenticated file upload in Amasty Order Attributes for Magento", "url": "https://sansec.io/research/amasty-order-attributes-file-upload", "published_at": "2026-06-12T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67219b474f", "title": "Magecart skimmer turns Stripe into a malware command server", "url": "https://sansec.io/research/stripe-api-skimmer-infrastructure", "published_at": "2026-06-04T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67226fc1d6", "title": "GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brands", "url": "https://sansec.io/research/gorgonagora-fake-storefront-skimming-network", "published_at": "2026-06-02T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6722b26454", "title": "Sansec adds support for Sylius 1 & 2", "url": "https://sansec.io/research/ecomscan-sylius", "published_at": "2026-06-01T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67237417df", "title": "Critical vulnerability in Mirasvit Cache Warmer for Magento", "url": "https://sansec.io/research/mirasvit-cache-warmer-object-injection", "published_at": "2026-05-26T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67242c9963", "title": "Critical FunnelKit vulnerability threatens 40,000+ WooCommerce checkouts", "url": "https://sansec.io/research/funnelkit-woocommerce-vulnerability-exploited", "published_at": "2026-05-14T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67247c2ff8", "title": "Composer vulnerability leaks GitHub tokens, threatens PHP supply chain", "url": "https://sansec.io/research/composer-github-token-leak", "published_at": "2026-05-13T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672545ce28", "title": "Over 200 PrestaShop stores expose installer, allowing full takeover", "url": "https://sansec.io/research/prestashop-installer-takeover", "published_at": "2026-04-14T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6725f4b0de", "title": "ClickFix malware hits DoD cybersecurity vendor homepage", "url": "https://sansec.io/research/clickfix-clipboard-hijacker", "published_at": "2026-04-10T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6726871b3a", "title": "SVG Onload Tag Hides Magecart Skimmer on 99 Stores", "url": "https://sansec.io/research/svg-onload-magecart-skimmer", "published_at": "2026-04-07T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67276e311c", "title": "Mass PolyShell attack wave hits 471 stores in one hour", "url": "https://sansec.io/research/polyshell-mass-attack-wave", "published_at": "2026-03-30T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6727f16bb3", "title": "Novel WebRTC skimmer bypasses security controls at $100+ billion car maker", "url": "https://sansec.io/research/webrtc-skimmer", "published_at": "2026-03-24T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67284bc888", "title": "PolyShell: unrestricted file upload in Magento and Adobe Commerce", "url": "https://sansec.io/research/magento-polyshell", "published_at": "2026-03-17T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6728e1059a", "title": "Digital skimmer hits global supermarket chain", "url": "https://sansec.io/research/global-retailer-prestashop-hacked", "published_at": "2026-02-20T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6728f43da3", "title": "Building a faster YARA engine in pure Go", "url": "https://sansec.io/research/yargo", "published_at": "2026-02-18T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6729d7766d", "title": "Magento Developers Impersonated in Targeted GitHub Malware Operation", "url": "https://sansec.io/research/fake-magento-repos-github-malware", "published_at": "2026-02-11T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672aa3e42d", "title": "Claude finds 353 zero-days on Packagist", "url": "https://sansec.io/research/claude-finds-353-zero-days-packagist", "published_at": "2026-01-22T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672b90299f", "title": "The billion-dollar security.txt problem", "url": "https://sansec.io/research/security-txt-trillion-dollar-problem", "published_at": "2026-01-16T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672c026f24", "title": "Keylogger targets 200,000+ employees at major US bank", "url": "https://sansec.io/research/keylogger-major-us-bank-employees", "published_at": "2026-01-15T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672c5b98d2", "title": "ConnectPOS leaked Github secrets for years", "url": "https://sansec.io/research/connectpos-github-token-exposure", "published_at": "2026-01-12T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672ca48cb1", "title": "Critical backdoor found in MGT Varnish extension", "url": "https://sansec.io/research/mgt-varnish-critical-vulnerability", "published_at": "2025-12-15T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672d7c09a7", "title": "SessionReaper attacks have started, 3 in 5 stores still vulnerable", "url": "https://sansec.io/research/sessionreaper-exploitation", "published_at": "2025-10-22T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672dee2b94", "title": "SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025-54236)", "url": "https://sansec.io/research/sessionreaper", "published_at": "2025-09-08T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672ec2a383", "title": "Adobe patches critical Magento admin takeover via menu injection", "url": "https://sansec.io/research/magento-menu-bar-hack", "published_at": "2025-06-12T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672efcd5a3", "title": "Backdoor found in popular ecommerce components", "url": "https://sansec.io/research/license-backdoor", "published_at": "2025-05-01T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f672f3629fd", "title": "Found defunct.dat on your site? You've got a problem.", "url": "https://sansec.io/research/gsocket", "published_at": "2025-04-03T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6730339138", "title": "You have 2 weeks left to set up CSP for your store", "url": "https://sansec.io/research/csp-usage-2025", "published_at": "2025-03-17T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f673093c405", "title": "Merchants left guessing at last-minute PCI-DSS u-turn", "url": "https://sansec.io/research/pci-dss-update-2025", "published_at": "2025-03-06T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67318e9183", "title": "Magento Security Release APSB25-08 [Impact Analysis]", "url": "https://sansec.io/research/magento-apsb25-08", "published_at": "2025-02-12T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6731d32a9d", "title": "Sorry, client-side security does not work", "url": "https://sansec.io/research/client-side-security", "published_at": "2025-02-03T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67322f8271", "title": "Google services abused in skimming campaigns", "url": "https://sansec.io/research/google-services-abused-skimming-campaigns", "published_at": "2024-12-31T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6732c6b10e", "title": "Thousands of Adobe Commerce stores hacked in competing CosmicSting campaigns", "url": "https://sansec.io/research/cosmicsting-fallout", "published_at": "2024-10-01T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6733ad523f", "title": "CosmicSting attack & defense overview", "url": "https://sansec.io/research/cosmicsting", "published_at": "2024-09-16T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f673481c591", "title": "Persistent backdoors injected on Adobe Commerce via new CosmicSting attack", "url": "https://sansec.io/research/cosmicsting-cnext-persistent-backdoor", "published_at": "2024-08-27T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67356c1c5b", "title": "CosmicSting attacks have started hitting major stores", "url": "https://sansec.io/research/cosmicsting-hitting-major-stores", "published_at": "2024-07-12T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6735b5ae97", "title": "Polyfill supply chain attack hits 100K+ sites", "url": "https://sansec.io/research/polyfill-supply-chain-attack", "published_at": "2024-06-25T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67367def19", "title": "CosmicSting attack threatens 75% of Adobe Commerce stores", "url": "https://sansec.io/research/cosmicsting-unpatched", "published_at": "2024-06-18T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67368e8e60", "title": "Persistent Magento backdoor hidden in XML", "url": "https://sansec.io/research/magento-xml-backdoor", "published_at": "2024-04-04T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67377a2ca0", "title": "Sansec joins forces with Google's VirusTotal", "url": "https://sansec.io/research/virustotal-sansec", "published_at": "2024-03-08T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f673818e680", "title": "Sansec and Europol counter online skimming", "url": "https://sansec.io/research/europol-sansec-action", "published_at": "2024-01-09T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f67387600b0", "title": "Magento wish list exploit bypasses WAF protection", "url": "https://sansec.io/research/magento-wish-list-exploits", "published_at": "2023-12-18T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6738ff3499", "title": "Is your store’s newsletter being used for phishing?", "url": "https://sansec.io/research/is-your-stores-newsletter-being-used-for-phishing", "published_at": "2023-11-10T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f6739b87e46", "title": "Malware Persistence via Telegram and GitHub", "url": "https://sansec.io/research/malware-persistence-via-telegram-and-github", "published_at": "2023-08-22T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f673a10dde4", "title": "Postponed Exfiltration Evades Detection", "url": "https://sansec.io/research/postponed-exfiltration-evades-detection", "published_at": "2023-05-09T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f673a1bd9fc", "title": "Sansec analysis: 12% of online stores leak private backups", "url": "https://sansec.io/research/sansec-analysis-12-of-online-stores-leak-private-backups", "published_at": "2023-02-07T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f673ae7cb1a", "title": "Vendors defeat Magento security patch (+ simple check)", "url": "https://sansec.io/research/vendors-defeat-magento-security-patch-simple-check", "published_at": "2023-01-17T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f673babaf8b", "title": "Fake Klaviyo accounts added to Magento", "url": "https://sansec.io/research/fake-klaviyo-accounts-added-to-magento", "published_at": "2022-12-21T00:00:00+00:00" }, { "id": "01a0e457-b4f2-725c-9b90-3f673bdc09cc", "title": "Adobe Commerce merchants to be hit with TrojanOrders this season", "url": "https://sansec.io/research/trojanorder-magento", "published_at": "2022-11-15T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c2cac2c4", "title": "Extortion of Magento merchants", "url": "https://sansec.io/research/extortion-magento-bitcoin", "published_at": "2022-11-07T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c3baf02c", "title": "Surge in Magento 2 template attacks", "url": "https://sansec.io/research/magento-2-template-attacks", "published_at": "2022-09-22T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c3fac9cb", "title": "Magento vendor Fishpig hacked, backdoors added", "url": "https://sansec.io/research/rekoobe-fishpig-magento", "published_at": "2022-09-13T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c48c18be", "title": "Magento 2 critical vulnerability (CVE-2022-24086 & CVE-2022-24087)", "url": "https://sansec.io/research/magento-2-cve-2022-24086", "published_at": "2022-02-14T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c49bf0fe", "title": "NaturalFreshMall: a Magento Mass Hack", "url": "https://sansec.io/research/naturalfreshmall-mass-hack", "published_at": "2022-02-08T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c5994bb9", "title": "Magento and the Log4j vulnerability", "url": "https://sansec.io/research/magento-log4j-log4shell", "published_at": "2021-12-13T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c678053d", "title": "NginRAT parasite targets Nginx", "url": "https://sansec.io/research/nginrat", "published_at": "2021-12-01T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c6acd06d", "title": "CronRAT malware hides behind February 31st", "url": "https://sansec.io/research/cronrat", "published_at": "2021-11-24T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c76799dd", "title": "New linux_avp malware hits eCommerce sites", "url": "https://sansec.io/research/ecommerce-malware-linux-avp", "published_at": "2021-11-18T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c7c761a5", "title": "Google Apps Script used to steal data", "url": "https://sansec.io/research/google-apps-script", "published_at": "2021-02-18T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c8902257", "title": "Fake payment page before checkout on Shopify and BigCommerce", "url": "https://sansec.io/research/skimmer-dynamic-exfiltration-shopify-bigcommerce", "published_at": "2020-12-24T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c98dbe6e", "title": "eCommerce trojan accidentally leaks victims", "url": "https://sansec.io/research/ecommerce-rat-leaks-victims", "published_at": "2020-12-18T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153c9c749ca", "title": "Hackers exploit security flaw right before Black Friday", "url": "https://sansec.io/research/magento-2-persistent-parasite", "published_at": "2020-12-02T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153ca68c940", "title": "Payment skimmer hides in social media buttons", "url": "https://sansec.io/research/svg-malware", "published_at": "2020-11-26T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153ca75c3dd", "title": "Cardbleed: 3% of Magento install base hacked", "url": "https://sansec.io/research/cardbleed", "published_at": "2020-09-14T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153caeedc76", "title": "North Korean hackers are skimming US and European shoppers", "url": "https://sansec.io/research/north-korea-magecart", "published_at": "2020-07-06T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153cbaba266", "title": "Digital skimmer runs entirely on Google, defeats CSP", "url": "https://sansec.io/research/skimming-google-defeats-csp", "published_at": "2020-06-22T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153cc18c229", "title": "Lockdown: Stores closed, online stores hacked", "url": "https://sansec.io/research/magecart-corona-lockdown", "published_at": "2020-06-15T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153cca99ff2", "title": "Do these two things to keep your Magento 1 store running after June", "url": "https://sansec.io/research/magento-1-beyond-june", "published_at": "2020-05-28T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153cda8e79b", "title": "Magento 1 still PCI compliant after 1 July 2020?", "url": "https://sansec.io/research/magento-1-pci-compliance", "published_at": "2020-05-08T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153ce23b4a5", "title": "Sansec reveals longest Magecart skimming operation to date [Analysis]", "url": "https://sansec.io/research/longest-skimming-operation-yet", "published_at": "2020-02-25T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153ce8e13c9", "title": "Maxcluster and Sansec partner to secure German stores", "url": "https://sansec.io/research/sanguine-maxcluster-partnership", "published_at": "2020-02-20T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153cee5e436", "title": "Indonesian Magecart hackers arrested", "url": "https://sansec.io/research/magecart-hackers-arrested", "published_at": "2020-01-25T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153cf7f4ff2", "title": "Payment skimmers have impersonated Sansec", "url": "https://sansec.io/research/magecart-hackers-target-sanguine", "published_at": "2019-12-02T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d02ec5ef", "title": "American Cancer Society hit by payment skimmer", "url": "https://sansec.io/research/american-cancer-society-magecart", "published_at": "2019-10-25T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d0c543a4", "title": "Magento security extentions vendor got hacked", "url": "https://sansec.io/research/magento-plugin-vendor-compromised", "published_at": "2019-10-07T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d0ffb58a", "title": "FBI recommends eCommerce malware protection", "url": "https://sansec.io/research/fbi-urges-malware-protection", "published_at": "2019-08-17T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d1e9b3b8", "title": "Sansec at Europol training: 50,000+ stores hacked", "url": "https://sansec.io/research/sansec-europol-training-payment-fraud", "published_at": "2019-08-12T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d2627522", "title": "PCI-SSC/RHISAC quote Sansec: 20% stores reinfected", "url": "https://sansec.io/research/pci-rhisac-use-sansec-research", "published_at": "2019-08-01T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d2fb9b4b", "title": "Critical Magento 2 flaw exploited within 16 hours", "url": "https://sansec.io/research/magento-2-hacks", "published_at": "2019-05-10T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d38a775f", "title": "Sports brand Puma infected with advanced malware", "url": "https://sansec.io/research/puma-magecart", "published_at": "2019-04-29T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d4474f6c", "title": "57 payment gateways from Germany to Brazil targeted", "url": "https://sansec.io/research/polymorphic-skimmer-57-payment-gateways", "published_at": "2019-04-29T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d4f36636", "title": "Credit cards of Atlanta Hawks fans stolen", "url": "https://sansec.io/research/atlanta-hawks-magecart", "published_at": "2019-04-24T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d57ccf77", "title": "Bad extensions now main source of Magento hacks: a solution!", "url": "https://sansec.io/research/magento-module-blacklist", "published_at": "2019-01-29T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d629b986", "title": "Large sites hacked via Adminer database tool", "url": "https://sansec.io/research/sites-hacked-via-mysql-protocal-flaw", "published_at": "2019-01-20T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d67f9362", "title": "PHP tool 'Adminer' leaks passwords", "url": "https://sansec.io/research/adminer-4.6.2-file-disclosure-vulnerability", "published_at": "2019-01-17T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d6daea7c", "title": "Competing digital skimmers sabotage each other", "url": "https://sansec.io/research/warring-magecart-factions", "published_at": "2018-11-20T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d7d5c9c6", "title": "Merchants struggle with MageCart reinfections", "url": "https://sansec.io/research/merchants-struggle-with-magecart-reinfections", "published_at": "2018-11-12T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d88414cc", "title": "Backdoor found in Webgility", "url": "https://sansec.io/research/webgility-backdoor", "published_at": "2018-10-30T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d8ae52f0", "title": "Unpublished security flaws (0days) massively exploited", "url": "https://sansec.io/research/magecart-extension-0days", "published_at": "2018-10-23T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d8d16a67", "title": "German political party store hacked before election", "url": "https://sansec.io/research/csu-shop-magecarted", "published_at": "2018-10-15T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d98df54c", "title": "MageCart: now with tripwire", "url": "https://sansec.io/research/magecart-tripwire", "published_at": "2018-10-04T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d9def500", "title": "ABS-CBN next in series of high profile breaches", "url": "https://sansec.io/research/abs-cbn.com-hacked", "published_at": "2018-09-18T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153d9e5aafd", "title": "Is your Google Analytics code malicious?", "url": "https://sansec.io/research/fake-google-analytics-malware", "published_at": "2018-09-06T00:00:00+00:00" }, { "id": "01a0e457-b4f3-7280-ab58-8153da01e641", "title": "MagentoCore group hacks 7,339 stores and counting", "url": "https://sansec.io/research/magentocore.net-skimmer-most-aggressive-to-date", "published_at": "2018-08-30T00:00:00+00:00" } ] posts Claim your blog

Back to sansec.io

Blog · corpus.blog/blogs/sansec.io/posts

sansec.io

sansec.io

2026

Brevo supply chain attack hits 100k+ sites with Wordpress backdoors and Clickfix malware original ↗

16 Sept 2026

StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack original ↗

5 Sept 2026

Shopware fixes Store API vulnerability allowing administrator takeover original ↗

25 Aug 2026

Adobe patches critical Magento account takeover (APSB26-92)original ↗

11 Aug 2026

Amasty patches dozens of Magento extensions, 2 critical original ↗

2 Jul 2026

Unauthenticated remote code execution in JTL Shop original ↗

17 Jun 2026

OptinMonster supply chain attack hits 1.2 million sites original ↗

13 Jun 2026

Unauthenticated file upload in Amasty Order Attributes for Magento original ↗

12 Jun 2026

Magecart skimmer turns Stripe into a malware command server original ↗

4 Jun 2026

GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brands original ↗

2 Jun 2026

Sansec adds support for Sylius 1 & 2 original ↗

1 Jun 2026

Critical vulnerability in Mirasvit Cache Warmer for Magento original ↗

26 May 2026

Critical FunnelKit vulnerability threatens 40,000+ WooCommerce checkouts original ↗

14 May 2026

Composer vulnerability leaks GitHub tokens, threatens PHP supply chain original ↗

13 May 2026

Over 200 PrestaShop stores expose installer, allowing full takeover original ↗

14 Apr 2026

ClickFix malware hits DoD cybersecurity vendor homepage original ↗

10 Apr 2026

SVG Onload Tag Hides Magecart Skimmer on 99 Stores original ↗

7 Apr 2026

Mass PolyShell attack wave hits 471 stores in one hour original ↗

30 Mar 2026

Novel WebRTC skimmer bypasses security controls at $100+ billion car maker original ↗

24 Mar 2026

PolyShell: unrestricted file upload in Magento and Adobe Commerce original ↗

17 Mar 2026

Digital skimmer hits global supermarket chain original ↗

20 Feb 2026

Building a faster YARA engine in pure Go original ↗

18 Feb 2026

Magento Developers Impersonated in Targeted GitHub Malware Operation original ↗

11 Feb 2026

Claude finds 353 zero-days on Packagist original ↗

22 Jan 2026

The billion-dollar security.txt problem original ↗

16 Jan 2026

Keylogger targets 200,000+ employees at major US bank original ↗

15 Jan 2026

ConnectPOS leaked Github secrets for years original ↗

12 Jan 2026

2025

Critical backdoor found in MGT Varnish extension original ↗

15 Dec 2025

SessionReaper attacks have started, 3 in 5 stores still vulnerable original ↗

22 Oct 2025

SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025-54236)original ↗

8 Sept 2025

Adobe patches critical Magento admin takeover via menu injection original ↗

12 Jun 2025

Backdoor found in popular ecommerce components original ↗

1 May 2025

Found defunct.dat on your site? You've got a problem.original ↗

3 Apr 2025

You have 2 weeks left to set up CSP for your store original ↗

17 Mar 2025

Merchants left guessing at last-minute PCI-DSS u-turn original ↗

6 Mar 2025

Magento Security Release APSB25-08 [Impact Analysis]original ↗

12 Feb 2025

Sorry, client-side security does not work original ↗

3 Feb 2025

2024

Google services abused in skimming campaigns original ↗

31 Dec 2024

Thousands of Adobe Commerce stores hacked in competing CosmicSting campaigns original ↗

1 Oct 2024

CosmicSting attack & defense overview original ↗

16 Sept 2024

Persistent backdoors injected on Adobe Commerce via new CosmicSting attack original ↗

27 Aug 2024

CosmicSting attacks have started hitting major stores original ↗

12 Jul 2024

Polyfill supply chain attack hits 100K+ sites original ↗

25 Jun 2024

CosmicSting attack threatens 75% of Adobe Commerce stores original ↗

18 Jun 2024

Persistent Magento backdoor hidden in XML original ↗

4 Apr 2024

Sansec joins forces with Google's VirusTotal original ↗

8 Mar 2024

Sansec and Europol counter online skimming original ↗

9 Jan 2024

2023

Magento wish list exploit bypasses WAF protection original ↗

18 Dec 2023

Is your store’s newsletter being used for phishing?original ↗

10 Nov 2023

Malware Persistence via Telegram and GitHub original ↗

22 Aug 2023

Postponed Exfiltration Evades Detection original ↗

9 May 2023

Sansec analysis: 12% of online stores leak private backups original ↗

7 Feb 2023

Vendors defeat Magento security patch (+ simple check)original ↗

17 Jan 2023

2022

Fake Klaviyo accounts added to Magento original ↗

21 Dec 2022

Adobe Commerce merchants to be hit with TrojanOrders this season original ↗

15 Nov 2022

Extortion of Magento merchants original ↗

7 Nov 2022

Surge in Magento 2 template attacks original ↗

22 Sept 2022

Magento vendor Fishpig hacked, backdoors added original ↗

13 Sept 2022

Magento 2 critical vulnerability (CVE-2022-24086 & CVE-2022-24087)original ↗

14 Feb 2022

NaturalFreshMall: a Magento Mass Hack original ↗

8 Feb 2022

2021

Magento and the Log4j vulnerability original ↗

13 Dec 2021

NginRAT parasite targets Nginx original ↗

1 Dec 2021

CronRAT malware hides behind February 31st original ↗

24 Nov 2021

New linux_avp malware hits eCommerce sites original ↗

18 Nov 2021

Google Apps Script used to steal data original ↗

18 Feb 2021

2020

Fake payment page before checkout on Shopify and BigCommerce original ↗

24 Dec 2020

eCommerce trojan accidentally leaks victims original ↗

18 Dec 2020

Hackers exploit security flaw right before Black Friday original ↗

2 Dec 2020

Payment skimmer hides in social media buttons original ↗

26 Nov 2020

Cardbleed: 3% of Magento install base hacked original ↗

14 Sept 2020

North Korean hackers are skimming US and European shoppers original ↗

6 Jul 2020

Digital skimmer runs entirely on Google, defeats CSP original ↗

22 Jun 2020

Lockdown: Stores closed, online stores hacked original ↗

15 Jun 2020

Do these two things to keep your Magento 1 store running after June original ↗

28 May 2020

Magento 1 still PCI compliant after 1 July 2020?original ↗

8 May 2020

Sansec reveals longest Magecart skimming operation to date [Analysis]original ↗

25 Feb 2020

Maxcluster and Sansec partner to secure German stores original ↗

20 Feb 2020

Indonesian Magecart hackers arrested original ↗

25 Jan 2020

2019

Payment skimmers have impersonated Sansec original ↗

2 Dec 2019

American Cancer Society hit by payment skimmer original ↗

25 Oct 2019

Magento security extentions vendor got hacked original ↗

7 Oct 2019

FBI recommends eCommerce malware protection original ↗

17 Aug 2019

Sansec at Europol training: 50,000+ stores hacked original ↗

12 Aug 2019

PCI-SSC/RHISAC quote Sansec: 20% stores reinfected original ↗

1 Aug 2019

Critical Magento 2 flaw exploited within 16 hours original ↗

10 May 2019

Sports brand Puma infected with advanced malware original ↗

29 Apr 2019

57 payment gateways from Germany to Brazil targeted original ↗

29 Apr 2019

Credit cards of Atlanta Hawks fans stolen original ↗

24 Apr 2019

Bad extensions now main source of Magento hacks: a solution!original ↗

29 Jan 2019

Large sites hacked via Adminer database tool original ↗

20 Jan 2019

PHP tool 'Adminer' leaks passwords original ↗

17 Jan 2019

2018

Competing digital skimmers sabotage each other original ↗

20 Nov 2018

Merchants struggle with MageCart reinfections original ↗

12 Nov 2018

Backdoor found in Webgility original ↗

30 Oct 2018

Unpublished security flaws (0days) massively exploited original ↗

23 Oct 2018

German political party store hacked before election original ↗

15 Oct 2018

MageCart: now with tripwire original ↗

4 Oct 2018

ABS-CBN next in series of high profile breaches original ↗

18 Sept 2018

Is your Google Analytics code malicious?original ↗

6 Sept 2018

MagentoCore group hacks 7,339 stores and counting original ↗

30 Aug 2018