Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A new unpatched vulnerability, named StyleSmuggler, has been discovered in Magento Open Source and Adobe Commerce, allowing unauthenticated attackers to execute remote code. The attacks began on September 4, 2026, and all current versions, including 2.4.9, are affected. Sansec, the Dutch e-commerce...
In January 2026, attackers exploited a critical vulnerability in Magento, tracked as CVE-2025-54236, to hijack over 200 e-commerce websites. This severe authentication flaw allowed threat actors to gain complete control of the affected systems, marking a significant wave of coordinated web server co...
Analysis of cybersecurity incidents in the UK retail and manufacturing sectors reveals that 1,381 breaches occurred between Q3 2024 and Q2 2025, with no significant concentration around major shopping events. Security experts indicate that while there are fears of increased attacks during the festiv...
A public exploit for CVE-2025-40778, a critical vulnerability in BIND 9, has been released, enabling DNS cache poisoning and traffic redirection. This flaw affects the widely used Domain Name System software, posing risks to global internet infrastructure. Cybersecurity professionals are urged to ta...
