Cybersecurity & Data Protection
0
UPVOTE
thehackernews.com

Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento

An unknown threat actor has infected 953 online stores, most of them running Magento, as part of a long-running campaign active since July 2025. According to Dutch e-commerce security company Sansec, the activity is designed to add a small piece of code to the store's pages that, when visited by unsuspecting users, serves malicious JavaScript loader code through Magento CMS blocks. "When you
Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
TN

The Hacker News

6h ago
0 0

Discussion

Take the lead—comment now

Lead the way—your insights can inspire others.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

No upvotes yet.

Be the first to show your appreciation for this content.

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

darkreading.com
Risks & Rewards: How AI Is Redefining the CISO's Role

Nvidia security executive Mark Weatherford says CISOs must help business leaders weigh AI's pros and cons, and ensure those deploying it own the risks.
DR

Dark Reading

5h ago
0
thehackernews.com
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Mod…

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sand…
RM

ryan maybe

11h ago
0
thehackernews.com
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach R…

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published t…
TN

The Hacker News

1d ago
0
thehackernews.com
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbo…

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inf…
MB

Maria Bakker

1d ago
0
bleepingcomputer.com
BlackX UEFI bootkit exploits Baton Drop flaw to bypass Secure B…

A new UEFI bootkit named BlackX, deployed in an espionage campaign in early 2026, exploited the old Baton Drop vulnerability to bypass Secure Boot and load a m…
Noor Bakker

Noor Bakker

2d ago
0
thehackernews.com
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python…

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and&n…
Rosa Martinez

Rosa Martinez

2d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
Two Critical Wasmtime Flaws Could Let Malicious WebAssembly Mod…

Two critical flaws in Wasmtime, a WebAssembly runtime that can be built into other software, could allow a malicious WebAssembly module to escape the sand…
RM

ryan maybe

11h ago
0
thehackernews.com
Unpatched Tailscale SSH Flaws Could Let a Hacked Device Reach R…

A single hacked device on a Tailscale network can be used to gain root access to other servers it can reach, according to a security researcher who published t…
TN

The Hacker News

1d ago
0
thehackernews.com
OpenAI AI Agents Demonstrate VM Escapes and Secret Cross-Sandbo…

OpenAI has announced plans to conduct frontier model training with no live internet access, as it resumes reinforcement learning (RL) training and internal inf…
MB

Maria Bakker

1d ago
0
thehackernews.com
Brotli Decoder Flaw Behind Node.js RCE Also Affects Bun, Python…

A memory-corruption flaw in Google's Brotli decoder sits in many programs that unpack Brotli-compressed data, among them Bun, the Python Brotli and&n…
Rosa Martinez

Rosa Martinez

2d ago
0
thehackernews.com
BlackX UEFI Bootkit Bypasses Secure Boot on Patched Windows Sys…

Diplomatic organizations in Central Asia have been targeted by a sophisticated new Unified Extensible Firmware Interface (UEFI) bootkit called BlackX. The act…
TN

The Hacker News

3d ago
0
thehackernews.com
URGENT - PHP Warns of Another Unpatched RCE Two Days After Emer…

PHP has warned of another way an attacker could run code on a web server, two days after it shipped emergency fixes for the critical PHP2Shell flaws. The new…
TN

The Hacker News

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest