Security Insights
Latest threat analysis, industry news, and security best practices from our expert team.
Magento Magecart Loader 'deepveindrilling' + Gheist GitHub Token Abuse: OTX Pulse Analysis — Enterprise Detection Pack
Magento CMS Block Loader + Gheist GitHub Token Campaign: OTX Threat Intelligence Briefing Threat Summary Two concurrent criminal operations ...
Magecart-Style JavaScript Loader Hits 953 Magento Stores via CMS Blocks — Detection and Remediation Guide
Magecart-Style JavaScript Loader Hits 953 Magento Stores via CMS Blocks — Detection and Remediation Guide A long-running Magecart-style camp...
European Retail Cyber Incidents: Detection and Hardening Guide for Retail Security Teams
Introduction Several Europe-based retail firms have confirmed they are dealing with cyber incidents, and H&M — one of the largest fashion re...
Labcorp's $2.3M AMCA Settlement: Third-Party Breach Detection and Vendor Risk Hardening Guide
Labcorp's $2.3M Settlement Is Really About Your Vendor Risk Program A coalition of 44 state attorneys general has agreed to settle a multist...
AI-Agent-Driven Magecart Campaign: 600K Credit Cards Stolen From 100+ Online Retailers — Detection and Hardening Guide
AI Agents Are Now Running Magecart Campaigns at Scale Security researchers have disclosed a financially motivated campaign in which a threat...
BigCommerce Merchant Breach via Compromised Ribon App Credentials: Defending Against Third-Party Script Injection and Web Skimming
What Happened Ecommerce platform BigCommerce has notified multiple merchants that their storefronts were breached after attackers compromise...
GrelosGTM Google Tag Manager Skimmer: Magento Checkout JS Sniffer + WebSocket Exfil Detection Pack
GrelosGTM Google Tag Manager Skimmer: Magento Checkout JS Sniffer + WebSocket Exfil Detection Pack Threat Summary The OTX pulse describes Gr...
Polymarket Supply Chain Attack: Frontend Script Injection Defense
Polymarket Supply Chain Attack: Frontend Script Injection Defense Introduction The recent incident involving Polymarket—where attackers expl...
Third-Party Breach at Polymarket: Supply Chain Code Injection and Detection Strategies
Introduction A recent breach at Polymarket, a decentralized information marketplace, resulted in the theft of approximately $2.94 million in...