Sansec BV

Sansec BV

@sans.ec

experts in eCommerce security - https://sansec.io

201 followers7 following13 posts

Sansec BV
@sans.ec

Adobe will release fix for the critical SessionReaper attack tomorrow Sept 9th. All Magento and Adobe Commerce versions are vulnerable. Sansec Shield users are already protected, all others should standby and implement patch once it is published (likely 14h UTC). sansec.io/research/ses...

sansec.ioSessionReaper, a critical bug in Magento & Adobe Commerce (CVE-2025-54236)Adobe breaks their regular patch schedule and will release an emergency fix for CVE-2025-54236 within the next 24 hours. Automated abuse is expected and merc...

Sansec BV reposted

BleepingComputer
@bleepingcomputer.com

A supply chain attack involving 21 backdoored Magento extensions has compromised between 500 and 1,000 e-commerce stores, including one belonging to a $40 billion multinational.

bleepingcomputer.comMagento supply chain attack compromises hundreds of e-storesA supply chain attack involving 21 backdoored Magento extensions has compromised between 500 and 1,000 e-commerce stores, including one belonging to a $40 billion multinational.
Sansec BV
@sans.ec

⚽️🔥 AS Roma has been hacked since March 19. Attack is ongoing, and customer data is leaked to the Russian SmartApe network (AS62212). We reached out 5 times to their privacy & security teams but no response.

Sansec BV
@sans.ec

Meanwhile, the attacker has upgraded their malware and rotated three exfil domains: bootrow\.com redtransfer\.net imgweb\.net PSA — This breach would have been prevented with Sansec Shield, our real-time malware protection layer.

Sansec BV
@sans.ec

"Foreign espionage campaign launched via Christmas sweaters" The 🚀 ESA (European Space Agency) store just got hacked. The store seems to be integrated with ESA systems, as employees are required to login with their ESA email address.

Sansec BV
@sans.ec

The exfil domain "esaspaceshop[.]pics" that is used to steal data from ESA staff, was registered a month ago but only showed up on the ESA site today.

You are up to date.