Published on: 2025-05-21 07:42:00
Facepalm: Supply chain attacks can remain dormant for extended periods before striking their target, but they typically don't take years to achieve their objectives. However, a recently uncovered attack managed to stay undetected for a record-breaking length of time. At least three vendors of e-commerce software tools were compromised in a coordinated supply chain attack dating back at least six years. According to security firm Sansec, the unknown attackers injected a dangerous backdoor into t
Keywords: chain commerce compromised sansec vendors
Find related items on AmazonPublished on: 2025-05-23 07:05:13
Hundreds of e-commerce sites, at least one owned by a large multinational company, were backdoored by malware that executes malicious code inside the browsers of visitors, where it can steal payment card information and other sensitive data, security researchers said Monday. The infections are the result of a supply-chain attack that compromised at least three software providers with malware that remained dormant for six years and became active only in the last few weeks. At least 500 e-commerc
Keywords: code commerce infected sansec software
Find related items on AmazonPublished on: 2025-05-25 11:09:55
A supply chain attack involving 21 backdoored Magento extensions has compromised between 500 and 1,000 e-commerce stores, including one belonging to a $40 billion multinational. Sansec researchers who discovered the attack report that some extensions were backdoored as far back as 2019, but the malicious code was only activated in April 2025. "Multiple vendors were hacked in a coordinated supply chain attack, Sansec found 21 applications with the same backdoor," explains Sansec. "Curiously, t
Keywords: backdoor meetanshi mgs sansec tigren
Find related items on AmazonGo K’awiil is a project by nerdhub.co that curates technology news from a variety of trusted sources. We built this site because, although news aggregation is incredibly useful, many platforms are cluttered with intrusive ads and heavy JavaScript that can make mobile browsing a hassle. By hand-selecting our favorite tech news outlets, we’ve created a cleaner, more mobile-friendly experience.
Your privacy is important to us. Go K’awiil does not use analytics tools such as Facebook Pixel or Google Analytics. The only tracking occurs through affiliate links to amazon.com, which are tagged with our Amazon affiliate code, helping us earn a small commission.
We are not currently offering ad space. However, if you’re interested in advertising with us, please get in touch at [email protected] and we’ll be happy to review your submission.