#ecommercesecurity — Public Fediverse posts

Magento Zero-Day Exploited to Install Linux Backdoor

A newly discovered zero-day vulnerability, dubbed "StyleSmuggler," is being exploited in the wild to install a stealthy Linux backdoor on over 160,000 Magento and Adobe Commerce sites, including 14,000 of the top 1 million sites. This alarming attack has already hit a target running the latest security updates, leaving many sites…

https://osintsights.com/magento-zero-day-exploited-to-install-linux-backdoor?utm_source=mastodon&utm_medium=social

#MagentoZeroday #LinuxBackdoor #Stylesmuggler #EcommerceSecurity #EmergingThreats

Magento Zero-Day Exploited to Install Persistent Backdoors

A critical Magento zero-day vulnerability, dubbed StyleSmuggler, is being actively exploited to install persistent backdoors on e-commerce stores, with attacks detected as early as September 4. All current versions of Magento Open Source and Adobe Commerce are affected, leaving stores vulnerable until a patch is released.

https://osintsights.com/magento-zero-day-exploited-to-install-persistent-backdoors?utm_source=mastodon&utm_medium=social

#MagentoZeroday #AdobeCommerce #SupplyChain #EcommerceSecurity #EmergingThreats

Third-party breach, 38M impacted, European e-commerce sector.
ManoMano disclosed unauthorized access linked to a subcontracted customer support provider. Exposed data reportedly includes PII and support communications.
Authorities notified: CNIL, ANSSI.
Passwords not reportedly accessed.
Subcontractor access revoked.

Key risk vectors:
– SaaS support platforms
– Vendor access governance
– Over-retention of ticketing data
– Centralized customer communication logs
– Supply chain attack surface expansion

This case reinforces that vendor monitoring must go beyond contractual clauses — continuous assessment, least privilege enforcement, data minimization strategies.

How mature is your third-party risk telemetry?
Engage below.

Source: https://www.bleepingcomputer.com/news/security/european-dyi-chain-manomano-data-breach-impacts-38-million-customers/

Follow @technadu for high-signal infosec reporting.

Repost to amplify awareness across the security community.

#Infosec #ThirdPartyRisk #VendorSecurity #SupplyChainSecurity #DataBreach #GDPRCompliance #EcommerceSecurity #CyberRiskManagement #SecurityOperations #GRC