Tag: Sansec
Nearly a thousand Magento storefronts still carry a visitor-skimming loader
Sansec has counted 953 infected online stores, most on Magento, in a campaign running since July 2025 that swaps loader…
A forgotten Cloudflare key turned 100,000 sites into a malware channel
Attackers used a long-lived Cloudflare API key stored in Brevo's own source code to push malware through the marketing platform's…
StyleSmuggler zero-day hijacks Magento stores with no patch ready
An unpatched flaw named StyleSmuggler is letting attackers backdoor Magento and Adobe Commerce stores with no login.
Session swap bug in Adobe Commerce draws attacks right after patch
Sansec blocked the first exploits of CVE-2026-71362, an unauthenticated account takeover in Adobe Commerce rated 9.1.