#ecommercesecurity — Public Fediverse posts

Magento Zero-Day Exploited to Install Linux Backdoor

A newly discovered zero-day vulnerability, dubbed "StyleSmuggler," is being exploited in the wild to install a stealthy Linux backdoor on over 160,000 Magento and Adobe Commerce sites, including 14,000 of the top 1 million sites. This alarming attack has already hit a target running the latest security updates, leaving many sites…

https://osintsights.com/magento-zero-day-exploited-to-install-linux-backdoor?utm_source=mastodon&utm_medium=social

#MagentoZeroday #LinuxBackdoor #Stylesmuggler #EcommerceSecurity #EmergingThreats

Magento Zero-Day Exploited to Install Persistent Backdoors

A critical Magento zero-day vulnerability, dubbed StyleSmuggler, is being actively exploited to install persistent backdoors on e-commerce stores, with attacks detected as early as September 4. All current versions of Magento Open Source and Adobe Commerce are affected, leaving stores vulnerable until a patch is released.

https://osintsights.com/magento-zero-day-exploited-to-install-persistent-backdoors?utm_source=mastodon&utm_medium=social

#MagentoZeroday #AdobeCommerce #SupplyChain #EcommerceSecurity #EmergingThreats

StyleSmuggler, a Magento zero-day, gives unauthenticated remote code execution and is exploited in the wild. No patch yet. Mitigate now.

#StyleSmuggler #Magento #AdobeCommerce #ZeroDay #RCE #eCommerceSecurity #Sansec #Infosec

https://securityonline.info/stylesmuggler-magento-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

StyleSmuggler, a Magento zero-day, gives unauthenticated remote code execution and is exploited in the wild. No patch yet. Mitigate now.

#StyleSmuggler #Magento #AdobeCommerce #ZeroDay #RCE #eCommerceSecurity #Sansec #Infosec

https://securityonline.info/stylesmuggler-magento-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

StyleSmuggler, a Magento zero-day, gives unauthenticated remote code execution and is exploited in the wild. No patch yet. Mitigate now.

#StyleSmuggler #Magento #AdobeCommerce #ZeroDay #RCE #eCommerceSecurity #Sansec #Infosec

https://securityonline.info/stylesmuggler-magento-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

StyleSmuggler, a Magento zero-day, gives unauthenticated remote code execution and is exploited in the wild. No patch yet. Mitigate now.

#StyleSmuggler #Magento #AdobeCommerce #ZeroDay #RCE #eCommerceSecurity #Sansec #Infosec

https://securityonline.info/stylesmuggler-magento-zero-day-rce/?utm_source=mastodon&utm_medium=jetpack_social

A dangerous flaw in Adobe Commerce lets hackers hijack customer sessions with zero effort—and 60% of Magento stores are still unpatched. Is your business vulnerable?

https://thedefendopsdiaries.com/understanding-and-responding-to-the-sessionreaper-vulnerability-in-adobe-commerce/

#sessionreaper
#adobecommerce
#magento
#cve202554236
#ecommercesecurity

🚨 Critical Magento & Adobe Commerce Flaw (CVE-2025-54236 – SessionReaper) 🚨

Impact: Customer account takeover + unauthenticated remote code execution (CVSS 9.1 Critical).

👉 Full details and action steps: https://hostvix.com/sessionreaper-critical-magento-adobe-commerce-vulnerability-cve-2025-54236/

#Magento #AdobeCommerce #SessionReaper #CVE202554236 #CVE #Infosec #CyberSecurity #AppSec #WebSecurity #SecOps #BlueTeam #RedTeam #ThreatIntel #Vulnerability #PatchNow #ZeroDay #Exploit #EcommerceSecurity #DataSecurity #SecurityUpdate