#MagentoSecurity

Sneaky Skimmer Malware Targets Magento Sites Ahead of Black Friday

by

November 27, 2024 at 12:52PM Attackers are exploiting Magento e-commerce sites with new card-skimming malware, identified by Sucuri. The malware dynamically steals payment information via JavaScript injections. Researchers recommend regular security audits, deploying Web application firewalls, maintaining updated software, using strong passwords, and implementing file integrity monitoring to safeguard against such attacks, especially during high-traffic … Read more

Patch Tuesday: Critical Flaws in Adobe Commerce, Photoshop, InDesign, Illustrator

by

November 12, 2024 at 01:04PM Adobe has released patches for critical vulnerabilities in several products, including Adobe Commerce and Magento Open Source, as part of its Patch Tuesday updates. This addresses significant security flaws to enhance user protection in applications like Photoshop, InDesign, and Illustrator. **Meeting Takeaways:** 1. Adobe has released patches addressing critical-severity bugs. … Read more

CosmicSting flaw impacts 75% of Adobe Commerce, Magento sites

by

June 20, 2024 at 05:32PM A critical vulnerability, “CosmicSting” (CVE-2024-34102), affecting Adobe Commerce and Magento websites, poses a major security threat. Despite a security update being available, the majority of impacted sites remain unpatched, leaving them open to severe attacks. Administrators are urged to apply the recommended fixes immediately, with specific versions provided. For those … Read more