Cybersecurity & Data Protection
1
UPVOTE
thehackernews.com

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Attackers are exploiting a new unpatched vulnerability in Magento Open Source and Adobe Commerce that lets them run malicious code on an online store's server without logging in, Dutch e-commerce security company Sansec said in an advisory published on September 5. Sansec, which discovered the flaw and named it StyleSmuggler, said attacks started on September 4. "Sansec is
Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
SA

SariMartinez

1d ago
1 0

Discussion

Get the discussion rolling

A single comment can start something great.

No comments yet.

Be the first to share your take and keep the conversation moving.

Join the conversation

Log in or sign up to add your comment and participate in the discussion!

Log In Sign Up

UPVOTERS

Community appreciation

See who found this content valuable and showed their support.

giulia_design

Giulia

GiuliaUpvoted 1d ago1 comments · 35 shares

TOPICS

Explore the same topics

Discover more content from the topics this post is mapped to.

thehackernews.com
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthe…

Every on-premises N-central build below 2026. 3. 1. 14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says th…
TN

The Hacker News

2026-09-07 11:09
0
bleepingcomputer.com
N-able patches max severity N-central flaw amid ongoing attacks

N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM)…
MB

Maria Bakker

1h ago
0
bleepingcomputer.com
ChatGPT Astra is now rolling out to $20 Plus subscription

OpenAI is now rolling out ChatGPT Astra, its most powerful model to date, to those with a $20 Plus subscription, but there's no word on when free users will ge…
NightCurator

NightCurator

4h ago
0
bleepingcomputer.com
Attackers conceal phishing lures using invisible Unicode charac…

Threat actors have adopted the ASCII smuggling technique in phishing campaigns, using invisible Unicode characters to evade email security filters. [. .. ]
PR

phoebe rn

16h ago
0
thehackernews.com
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH …

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrativ…
TN

The Hacker News

17h ago
0
bleepingcomputer.com
Over 5,400 hacked sites serve ClickFix payloads stored on the b…

A massive cybercriminal operation is leveraging thousands of compromised small-business websites to deliver ClickFix payloads stored in smart contracts on the…
RM

ryan maybe

1d ago
0

Keep browsing

Explore more from this topic

Dive into the full feed of curated posts covering Cybersecurity & Data Protection.

Browse Topics

RELATED CONTENT

Continue exploring

Discover more content that aligns with your interests and this post.

thehackernews.com
N-able Issues Fourth N-central Hotfix in Five Weeks for Unauthe…

Every on-premises N-central build below 2026. 3. 1. 14 — including servers updated to Hotfix 3 a day earlier — needs Hotfix 4. N-able's incident notice says th…
TN

The Hacker News

2026-09-07 11:09
0
thehackernews.com
Attackers Hijack MikroTik Routers Through Internet-Exposed SSH …

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrativ…
TN

The Hacker News

17h ago
0
thehackernews.com
Thousands of OpenAI Agents Quietly Turned an Abandoned Wiki Int…

A group of AI safety researchers says a fleet of autonomous agents that identified themselves as OpenAI systems left about 18, 000 posts on a dormant 25-year-o…
TN

The Hacker News

1d ago
0
thehackernews.com
Attackers Exploit PaperCut Flaws to Steal Credentials From Scho…

Threat actors are exploiting the newly disclosed PaperCut flaws to facilitate credential theft in attacks targeting the education sector in the U. S. and Europ…
NightCurator

NightCurator

2d ago
0
thehackernews.com
Phishing Campaign Sends Millions of Emails Using Invisible Unic…

Microsoft is alerting of a "high-volume phishing campaign" that's using invisible Unicode tag characters to bypass email filters. "Instead of using these char…
TN

The Hacker News

2d ago
0
thehackernews.com
ThreatsDay: CEO Phishing Kits, 5K Dropbox Account Hacks, OAuth …

The worst part is how normal these attacks look. A call from IT. A shared file. A trusted app. A simple request to click “Allow. ” Why break in when someone mi…
Noor Bakker

Noor Bakker

3d ago
0

Still curious?

See more related posts

Keep the inspiration flowing with fresh submissions and trending finds from the community.

View Latest