Threat Feed
Daily intelligence on vulnerabilities, threat actors and geopolitical context — distilled from primary sources.
Filtered Reports
6 / 6 results
highperson_alertThreat Actor953 E-Commerce Stores Compromised in Long-Running Magento Campaign
An unknown threat actor has been conducting a sustained campaign since July 2025 targeting e-commerce platforms, primarily Magento-based online stores. The actor demonstrates sophisticated operational security through scanner-evasion techniques and i…
criticalbug_reportVulnerabilityAdobe Commerce/Magento template injection enables remote code execution
Adobe Commerce and Magento Open Source (specific versions not disclosed in available data). Template injection vulnerability affecting web-facing e-commerce platforms.
criticalbug_reportVulnerabilityCritical RCE in Adobe Commerce/Magento allows arbitrary PHP execution
Adobe Commerce and Magento installations. Specific affected versions not disclosed in available information. Vulnerability resides in BlockStrap component.
criticalbug_reportVulnerabilityWSO2 and Adobe Commerce flaws actively exploited, added to CISA KEV
CVE-2026-5430: WSO2 API Control Plane, API Manager, Traffic Manager, and Universal Gateway (all versions not specified). CVE-2026-71362: Adobe Commerce and Magento (versions not specified).
criticalbug_reportVulnerabilityMagento StyleSmuggler zero-day actively exploited to deploy backdoor
All versions of Magento and Adobe Commerce, including latest patched versions. Affects approximately 160,000 websites globally, including 14,000 in the top 1 million sites.
criticalbug_reportVulnerabilityMagento/Adobe Commerce zero-day actively exploited since Sept 4
Magento Open Source and Adobe Commerce all current versions including 2.4.6, 2.4.7, 2.4.8, and 2.4.9. Confirmed exploitation on Magento Open Source; Adobe Commerce impact unconfirmed. Unauthenticated remote code execution via GraphQL.