The Curious Engineer

All blogs / Security

Sansec

sansec.io

Use Sansec eComscan to discover all malware & vulnerabilities in your online store. Supports Magento, Adobe Commerce, WooCommerce, Shopware, Sylius and m...

SecurityPHPWeb development

’15’16’17’18’19’20’21’22’23’24’25’26
Posts
113 from 17 Nov 2015 to 26 Oct 2026
Posting
weekly (32 in the last year)
Kind
company blog
Feed
https://sansec.io/atom.xml

2026 31

  1. Notorious Brazilian Magecart group hijacks Convertr checkouts via Plausible analytics
  2. deepveindrilling.com: Magento CMS block loader hits 953 stores
  3. PHP2Shell: PHP RCE (CVE-2026-109618, CVE-2026-109619)
  4. BlockStrap: Magento and Adobe Commerce RCE (CVE-2026-103849)
  5. Brevo supply chain attack hits 100k+ sites with Wordpress backdoors and Clickfix malware
  6. StyleSmuggler: Magento and Adobe Commerce 0-day RCE (CVE-2026-75650) under active attack
  7. Sansec discovers Shopware Store API vulnerability that lets attackers take over admin accounts
  8. Adobe patches critical Magento account takeover (APSB26-92)
  9. Amasty patches dozens of Magento extensions, 6 critical
  10. Unauthenticated remote code execution in JTL Shop
  11. OptinMonster supply chain attack hits 1.2 million sites
  12. Unauthenticated file upload in Amasty Order Attributes for Magento
  13. Magecart skimmer turns Stripe into a malware command server
  14. GorgonAgora: 4,800+ fake storefronts skim cards across hundreds of impersonated brands
  15. Sansec adds support for Sylius 1 & 2
  16. Critical vulnerability in Mirasvit Cache Warmer for Magento
  17. Critical FunnelKit vulnerability threatens 40,000+ WooCommerce checkouts
  18. Composer vulnerability leaks GitHub tokens, threatens PHP supply chain
  19. Over 200 PrestaShop stores expose installer, allowing full takeover
  20. ClickFix malware hits DoD cybersecurity vendor homepage
  21. SVG Onload Tag Hides Magecart Skimmer on 99 Stores
  22. Mass PolyShell attack wave hits 471 stores in one hour
  23. Novel WebRTC skimmer bypasses security controls at $100+ billion car maker
  24. PolyShell: unrestricted file upload in Magento and Adobe Commerce
  25. Digital skimmer hits global supermarket chain
  26. Building a faster YARA engine in pure Go
  27. Magento Developers Impersonated in Targeted GitHub Malware Operation
  28. Claude finds 353 zero-days on Packagist
  29. The billion-dollar security.txt problem
  30. Keylogger targets 200,000+ employees at major US bank
  31. ConnectPOS leaked Github secrets for years

2025 10

  1. Critical backdoor found in MGT Varnish extension
  2. SessionReaper attacks have started, 3 in 5 stores still vulnerable
  3. SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025-54236)
  4. Adobe patches critical Magento admin takeover via menu injection
  5. Backdoor found in popular ecommerce components
  6. Found defunct.dat on your site? You've got a problem.
  7. You have 2 weeks left to set up CSP for your store
  8. Merchants left guessing at last-minute PCI-DSS u-turn
  9. Magento Security Release APSB25-08 [Impact Analysis]
  10. Sorry, client-side security does not work

2024 10

  1. Google services abused in skimming campaigns
  2. Thousands of Adobe Commerce stores hacked in competing CosmicSting campaigns
  3. CosmicSting attack & defense overview
  4. Persistent backdoors injected on Adobe Commerce via new CosmicSting attack
  5. CosmicSting attacks have started hitting major stores
  6. Polyfill supply chain attack hits 100K+ sites
  7. CosmicSting attack threatens 75% of Adobe Commerce stores
  8. Persistent Magento backdoor hidden in XML
  9. Sansec joins forces with Google's VirusTotal
  10. Sansec and Europol counter online skimming

2023 6

  1. Magento wish list exploit bypasses WAF protection
  2. Is your store’s newsletter being used for phishing?
  3. Malware Persistence via Telegram and GitHub
  4. Postponed Exfiltration Evades Detection
  5. Sansec analysis: 12% of online stores leak private backups
  6. Vendors defeat Magento security patch (+ simple check)

2022 7

  1. Fake Klaviyo accounts added to Magento
  2. Adobe Commerce merchants to be hit with TrojanOrders this season
  3. Extortion of Magento merchants
  4. Surge in Magento 2 template attacks
  5. Magento vendor Fishpig hacked, backdoors added
  6. Magento 2 critical vulnerability (CVE-2022-24086 & CVE-2022-24087)
  7. NaturalFreshMall: a Magento Mass Hack

2021 5

  1. Magento and the Log4j vulnerability
  2. NginRAT parasite targets Nginx
  3. CronRAT malware hides behind February 31st
  4. New linux_avp malware hits eCommerce sites
  5. Google Apps Script used to steal data

2020 13

  1. Fake payment page before checkout on Shopify and BigCommerce
  2. eCommerce trojan accidentally leaks victims
  3. Hackers exploit security flaw right before Black Friday
  4. Payment skimmer hides in social media buttons
  5. Cardbleed: 3% of Magento install base hacked
  6. North Korean hackers are skimming US and European shoppers
  7. Digital skimmer runs entirely on Google, defeats CSP
  8. Lockdown: Stores closed, online stores hacked
  9. Do these two things to keep your Magento 1 store running after June
  10. Magento 1 still PCI compliant after 1 July 2020?
  11. Sansec reveals longest Magecart skimming operation to date [Analysis]
  12. Maxcluster and Sansec partner to secure German stores
  13. Indonesian Magecart hackers arrested

2019 13

  1. Payment skimmers have impersonated Sansec
  2. American Cancer Society hit by payment skimmer
  3. Magento security extentions vendor got hacked
  4. FBI recommends eCommerce malware protection
  5. Sansec at Europol training: 50,000+ stores hacked
  6. PCI-SSC/RHISAC quote Sansec: 20% stores reinfected
  7. Critical Magento 2 flaw exploited within 16 hours
  8. Sports brand Puma infected with advanced malware
  9. 57 payment gateways from Germany to Brazil targeted
  10. Credit cards of Atlanta Hawks fans stolen
  11. Bad extensions now main source of Magento hacks: a solution!
  12. Large sites hacked via Adminer database tool
  13. PHP tool 'Adminer' leaks passwords

2018 9

  1. Competing digital skimmers sabotage each other
  2. Merchants struggle with MageCart reinfections
  3. Backdoor found in Webgility
  4. Unpublished security flaws (0days) massively exploited
  5. German political party store hacked before election
  6. MageCart: now with tripwire
  7. ABS-CBN next in series of high profile breaches
  8. Is your Google Analytics code malicious?
  9. MagentoCore group hacks 7,339 stores and counting

2017 7

  1. Hackers breached Magento through helpdesk
  2. Cryptojacking found on 2496 online stores
  3. Why ordering HTTP headers is important
  4. Warning: fake Magento patch 9789 contains virus
  5. A Magento breach analysis: part 1
  6. An OpenCart/Magento hacking dashboard
  7. Self-healing malware restores itself after deletion

2016 1

  1. Visbot malware found on 6691 stores [analysis]

2015 1

  1. Criminals have rewired 3,500 online stores