#ecommercesecurity — Public Fediverse posts

Magecart Campaign Exploits Stripe to Host Stolen Payment Data

Meet the sneaky Magecart campaign that's exploiting Stripe to host stolen payment data, cleverly hiding its skimming code inside trusted domains like Google Tag Manager and Stripe's API. By using these legitimate-looking channels, the attack slips past security filters, putting online stores and customers at risk.

https://osintsights.com/magecart-campaign-exploits-stripe-to-host-stolen-payment-data?utm_source=mastodon&utm_medium=social

#Magecart #SupplyChain #EcommerceSecurity #GoogleTagManager #Stripe

Keeping your Magento store secure isn’t a one-time task—it’s an ongoing commitment. From weekly security scans and log monitoring to monthly patch updates and quarterly audits, a structured maintenance checklist helps protect your store from vulnerabilities and downtime. Stay ahead of threats, ensure data integrity, and build customer trust with consistent security practices.
Read full blog here :https://www.exinent.com/magento-development-company//
#Exinent #Magento #eCommerceSecurity #CyberSecurity

Third-party breach, 38M impacted, European e-commerce sector.
ManoMano disclosed unauthorized access linked to a subcontracted customer support provider. Exposed data reportedly includes PII and support communications.
Authorities notified: CNIL, ANSSI.
Passwords not reportedly accessed.
Subcontractor access revoked.

Key risk vectors:
– SaaS support platforms
– Vendor access governance
– Over-retention of ticketing data
– Centralized customer communication logs
– Supply chain attack surface expansion

This case reinforces that vendor monitoring must go beyond contractual clauses — continuous assessment, least privilege enforcement, data minimization strategies.

How mature is your third-party risk telemetry?
Engage below.

Source: https://www.bleepingcomputer.com/news/security/european-dyi-chain-manomano-data-breach-impacts-38-million-customers/

Follow @technadu for high-signal infosec reporting.

Repost to amplify awareness across the security community.

#Infosec #ThirdPartyRisk #VendorSecurity #SupplyChainSecurity #DataBreach #GDPRCompliance #EcommerceSecurity #CyberRiskManagement #SecurityOperations #GRC

Third-party breach, 38M impacted, European e-commerce sector.
ManoMano disclosed unauthorized access linked to a subcontracted customer support provider. Exposed data reportedly includes PII and support communications.
Authorities notified: CNIL, ANSSI.
Passwords not reportedly accessed.
Subcontractor access revoked.

Key risk vectors:
– SaaS support platforms
– Vendor access governance
– Over-retention of ticketing data
– Centralized customer communication logs
– Supply chain attack surface expansion

This case reinforces that vendor monitoring must go beyond contractual clauses — continuous assessment, least privilege enforcement, data minimization strategies.

How mature is your third-party risk telemetry?
Engage below.

Source: https://www.bleepingcomputer.com/news/security/european-dyi-chain-manomano-data-breach-impacts-38-million-customers/

Follow @technadu for high-signal infosec reporting.

Repost to amplify awareness across the security community.

#Infosec #ThirdPartyRisk #VendorSecurity #SupplyChainSecurity #DataBreach #GDPRCompliance #EcommerceSecurity #CyberRiskManagement #SecurityOperations #GRC

MagicSeller Data Breach: 500,000 User Records Allegedly Up for Sale https://dailydarkweb.net/magicseller-data-breach-500000-user-records-allegedly-up-for-sale/ #ecommercesecurity #magicsellercokr #CyberIncident #DataBreaches #DatabaseSale #databreach #SouthKorea #PIILeak

MagicSeller Data Breach: 500,000 User Records Allegedly Up for Sale https://dailydarkweb.net/magicseller-data-breach-500000-user-records-allegedly-up-for-sale/ #ecommercesecurity #magicsellercokr #CyberIncident #DataBreaches #DatabaseSale #databreach #SouthKorea #PIILeak

Peak shopping season is almost here 🎯, and for many online stores, the real challenge isn’t scale, it’s security.

ScaleCommerce, a leading e-commerce hosting provider in Germany, once saw clients hit with 3 million requests in an hour, driving up costs and risking downtime.

After integrating CrowdSec, they were able to block 95% of malicious bot traffic, cut infrastructure spend, and keep sites fast during peak demand ⚡️.

As the year’s biggest shopping weekend approaches, make sure your traffic surge comes from real customers, not attacks.

Read the full story: https://www.crowdsec.net/blog/scalecommerce-plummets-ops-costs-and-skyrockets-efficiency

#cybersecurity #ecommercesecurity #blackfriday2025 #botprotection

Peak shopping season is almost here 🎯, and for many online stores, the real challenge isn’t scale, it’s security.

ScaleCommerce, a leading e-commerce hosting provider in Germany, once saw clients hit with 3 million requests in an hour, driving up costs and risking downtime.

After integrating CrowdSec, they were able to block 95% of malicious bot traffic, cut infrastructure spend, and keep sites fast during peak demand ⚡️.

As the year’s biggest shopping weekend approaches, make sure your traffic surge comes from real customers, not attacks.

Read the full story: https://www.crowdsec.net/blog/scalecommerce-plummets-ops-costs-and-skyrockets-efficiency

#cybersecurity #ecommercesecurity #blackfriday2025 #botprotection

A dangerous flaw in Adobe Commerce lets hackers hijack customer sessions with zero effort—and 60% of Magento stores are still unpatched. Is your business vulnerable?

https://thedefendopsdiaries.com/understanding-and-responding-to-the-sessionreaper-vulnerability-in-adobe-commerce/

#sessionreaper
#adobecommerce
#magento
#cve202554236
#ecommercesecurity

A dangerous flaw in Adobe Commerce lets hackers hijack customer sessions with zero effort—and 60% of Magento stores are still unpatched. Is your business vulnerable?

https://thedefendopsdiaries.com/understanding-and-responding-to-the-sessionreaper-vulnerability-in-adobe-commerce/

#sessionreaper
#adobecommerce
#magento
#cve202554236
#ecommercesecurity

🚨 Critical Magento & Adobe Commerce Flaw (CVE-2025-54236 – SessionReaper) 🚨

Impact: Customer account takeover + unauthenticated remote code execution (CVSS 9.1 Critical).

👉 Full details and action steps: https://hostvix.com/sessionreaper-critical-magento-adobe-commerce-vulnerability-cve-2025-54236/

#Magento #AdobeCommerce #SessionReaper #CVE202554236 #CVE #Infosec #CyberSecurity #AppSec #WebSecurity #SecOps #BlueTeam #RedTeam #ThreatIntel #Vulnerability #PatchNow #ZeroDay #Exploit #EcommerceSecurity #DataSecurity #SecurityUpdate

🚨 Critical Magento & Adobe Commerce Flaw (CVE-2025-54236 – SessionReaper) 🚨

Impact: Customer account takeover + unauthenticated remote code execution (CVSS 9.1 Critical).

👉 Full details and action steps: https://hostvix.com/sessionreaper-critical-magento-adobe-commerce-vulnerability-cve-2025-54236/

#Magento #AdobeCommerce #SessionReaper #CVE202554236 #CVE #Infosec #CyberSecurity #AppSec #WebSecurity #SecOps #BlueTeam #RedTeam #ThreatIntel #Vulnerability #PatchNow #ZeroDay #Exploit #EcommerceSecurity #DataSecurity #SecurityUpdate

Riskified & Human Security are joining forces to help #ecommerce merchants manage agentic AI risks. https://jpmellojr.blogspot.com/2025/08/new-framework-targets-fraud-from.html #AgenticAI #EcommerceSecurity #FraudPrevention #AIrisks

🕵️‍♂️ Someone just got a Cartier watch for $0. How? With disappearing ink.
In our new video, we break down a real scam that costs businesses thousands.

Learn how it works – and how to protect your company 👉

https://youtu.be/WaS9tuD7qtU

#CyberSecurity #Neuronus #FraudAlert #EcommerceSecurity #BusinessTips

Alleged Data Breach Hits Maxikits 500K Records Exposed https://dailydarkweb.net/alleged-data-breach-hits-maxikits-500k-records-exposed/ #ecommercesecurity #customerdatabase #corporatedata #DataBreaches #PersonalData #ecommerce #Shopping #fesome

Alleged Data Breach Hits Maxikits 500K Records Exposed https://dailydarkweb.net/alleged-data-breach-hits-maxikits-500k-records-exposed/ #ecommercesecurity #customerdatabase #corporatedata #DataBreaches #PersonalData #ecommerce #Shopping #fesome

European Space Agency’s Web Shop Hacked: Astronomical Security Blunder or Cosmic Comedy?

ESA's web shop was hacked with a fake Stripe page! Even space explorers need cybersecurity. Let's keep those space souvenirs safe! #EcommerceSecurity
https://thenimblenerd.com/?p=1032507

Black Friday is coming and holiday shopping means increased API traffic—and security risks. Tackle API vulnerabilities, limit brute force, and prevent race conditions. Don’t let bad actors capitalize on your busy season! #EcommerceSecurity #APIs

https://www.traceable.ai/blog-post/api-security-strategies-ecommerce-black-friday

Black Friday is coming and holiday shopping means increased API traffic—and security risks. Tackle API vulnerabilities, limit brute force, and prevent race conditions. Don’t let bad actors capitalize on your busy season! #EcommerceSecurity #APIs

https://www.traceable.ai/blog-post/api-security-strategies-ecommerce-black-friday