#ecommercesecurity — Public Fediverse posts

Third-party breach, 38M impacted, European e-commerce sector.
ManoMano disclosed unauthorized access linked to a subcontracted customer support provider. Exposed data reportedly includes PII and support communications.
Authorities notified: CNIL, ANSSI.
Passwords not reportedly accessed.
Subcontractor access revoked.

Key risk vectors:
– SaaS support platforms
– Vendor access governance
– Over-retention of ticketing data
– Centralized customer communication logs
– Supply chain attack surface expansion

This case reinforces that vendor monitoring must go beyond contractual clauses — continuous assessment, least privilege enforcement, data minimization strategies.

How mature is your third-party risk telemetry?
Engage below.

Source: https://www.bleepingcomputer.com/news/security/european-dyi-chain-manomano-data-breach-impacts-38-million-customers/

Follow @technadu for high-signal infosec reporting.

Repost to amplify awareness across the security community.

#Infosec #ThirdPartyRisk #VendorSecurity #SupplyChainSecurity #DataBreach #GDPRCompliance #EcommerceSecurity #CyberRiskManagement #SecurityOperations #GRC

MagicSeller Data Breach: 500,000 User Records Allegedly Up for Sale https://dailydarkweb.net/magicseller-data-breach-500000-user-records-allegedly-up-for-sale/ #ecommercesecurity #magicsellercokr #CyberIncident #DataBreaches #DatabaseSale #databreach #SouthKorea #PIILeak

Peak shopping season is almost here 🎯, and for many online stores, the real challenge isn’t scale, it’s security.

ScaleCommerce, a leading e-commerce hosting provider in Germany, once saw clients hit with 3 million requests in an hour, driving up costs and risking downtime.

After integrating CrowdSec, they were able to block 95% of malicious bot traffic, cut infrastructure spend, and keep sites fast during peak demand ⚡️.

As the year’s biggest shopping weekend approaches, make sure your traffic surge comes from real customers, not attacks.

Read the full story: https://www.crowdsec.net/blog/scalecommerce-plummets-ops-costs-and-skyrockets-efficiency

#cybersecurity #ecommercesecurity #blackfriday2025 #botprotection

A dangerous flaw in Adobe Commerce lets hackers hijack customer sessions with zero effort—and 60% of Magento stores are still unpatched. Is your business vulnerable?

https://thedefendopsdiaries.com/understanding-and-responding-to-the-sessionreaper-vulnerability-in-adobe-commerce/

#sessionreaper
#adobecommerce
#magento
#cve202554236
#ecommercesecurity

🚨 Critical Magento & Adobe Commerce Flaw (CVE-2025-54236 – SessionReaper) 🚨

Impact: Customer account takeover + unauthenticated remote code execution (CVSS 9.1 Critical).

👉 Full details and action steps: https://hostvix.com/sessionreaper-critical-magento-adobe-commerce-vulnerability-cve-2025-54236/

#Magento #AdobeCommerce #SessionReaper #CVE202554236 #CVE #Infosec #CyberSecurity #AppSec #WebSecurity #SecOps #BlueTeam #RedTeam #ThreatIntel #Vulnerability #PatchNow #ZeroDay #Exploit #EcommerceSecurity #DataSecurity #SecurityUpdate

🕵️‍♂️ Someone just got a Cartier watch for $0. How? With disappearing ink.
In our new video, we break down a real scam that costs businesses thousands.

Learn how it works – and how to protect your company 👉

https://youtu.be/WaS9tuD7qtU

#CyberSecurity #Neuronus #FraudAlert #EcommerceSecurity #BusinessTips

Alleged Data Breach Hits Maxikits 500K Records Exposed https://dailydarkweb.net/alleged-data-breach-hits-maxikits-500k-records-exposed/ #ecommercesecurity #customerdatabase #corporatedata #DataBreaches #PersonalData #ecommerce #Shopping #fesome

European Space Agency’s Web Shop Hacked: Astronomical Security Blunder or Cosmic Comedy?

ESA's web shop was hacked with a fake Stripe page! Even space explorers need cybersecurity. Let's keep those space souvenirs safe! #EcommerceSecurity
https://thenimblenerd.com/?p=1032507

Black Friday is coming and holiday shopping means increased API traffic—and security risks. Tackle API vulnerabilities, limit brute force, and prevent race conditions. Don’t let bad actors capitalize on your busy season! #EcommerceSecurity #APIs

https://www.traceable.ai/blog-post/api-security-strategies-ecommerce-black-friday