Web Services Security, E-Commerce Security news, articles & updates| SC Media
Skip to navigation Skip to main content

Web Services Security, E-Commerce Security

Cybercrime, Malware, Retail, Security News, Web Services Security, E-Commerce Security, Website/Web Server Security

Magecart attack on e-commerce service impacts Sesame Street store and many more

By
Publish Date

Magecart hackers found out how to get to Sesame Street’s online store – and in all likelihood thousands more merchants – by initially compromising e-commerce and shopping cart service provider Volusion to deliver the credit card-skimming code. Israel-based security researcher Marcel Afrahim, who for his day job works as a research developer at Check Point…

VBulletin
Network Security, Security News, Vulnerabilities, Web Services Security, E-Commerce Security

Reports: Actively exploited zero-day found in vBulletin forum software

By
Publish Date

The vBulletin internet forum software package reportedly contains a critical zero-day remote code execution vulnerability that attackers have been actively exploiting, possibly as far back as three years ago. Multiple news organizations are reporting that a researcher studying the well-known forum software published a pre-auth RCE exploit for the bug on vBulletin’s Full Disclosure security mailing…

Cybercrime, Data Breach, Government, Security News, Vulnerabilities, Web Services Security, E-Commerce Security

Eight cities’ payment records impacted in Click2Gov portal breach

By
Publish Date

For the second time since 2017, the third-party government bill-payment portal Click2Gov has experienced a significant data breach affecting thousands of individuals in multiple cities across the U.S. Government entities use the Click2Gov portal to accept payments for permits, licenses, fines and utilities. Discovered by fraud intelligence experts at Gemini Advisory, this latest attack compromised…

hotel
Cybercrime, Malware, Mobile Security, Retail, Security News, Web Services Security, E-Commerce Security, Website/Web Server Security

Hotel websites infected with skimmer via supply chain attack

By
Publish Date

A Magecart card-skimming campaign this month sabotaged the mobile websites of two hotel chains by executing a supply chain attack on a third-party partner, researchers have reported. The third party in both instances was Roomleader, a Barcelona-based provider of digital marketing and web development services. One of the ways Roomleader helps hospitality companies build out…

Miscreants infected a poker player's laptop malware that monitored his every online gambling move.
Cybercrime, Malware, Security News, Web Services Security, E-Commerce Security, Website/Web Server Security

New way to lose at poker? Card game domains infected with Magecart skimmer

By
Publish Date

Cybercriminals are upping the ante when it comes to compromising websites with Magecart payment card skimmers, as evidence by the recent discovery of two infected web domains used by poker enthusiasts. A Malwarebytes blog post this week identified the two affected web pages as pokertracker.com and its subdomain pt4pokertracker.com. Both are related to a software…

Data Breach, Security News, Web Services Security, E-Commerce Security

Data dump suggests that Evite data breach affected 100M accounts

By
Publish Date

A new addition to the data breach reference website “Have I Been Pwned?” seemingly reveals that more than 100 million accounts were compromised in this year’s data breach of the event-planning service Evite. “Have I Been Pwned?” founder Troy Hunt added a database of 100,985,047 affected accounts to his site on July 14, and in…

Cybercrime, Malware, Security News, Web Services Security, E-Commerce Security, Website/Web Server Security

Magecart group compromises 17,000 domains by overwriting Amazon S3 buckets

By
Publish Date

One of the “Magecart” cybercriminal groups has infected more than 17,000 web domains with JavaScript-based payment card-skimming code by developing an automated process for finding and compromising misconfigured Amazon S3 buckets, researchers have reported. “These actors automatically scan for buckets which are misconfigured to allow anyone to view and edit the files it contains,” writes…

Cybercrime, Malware, Retail, Security News, Web Services Security, E-Commerce Security, Website/Web Server Security

Automated Magecart campaign infects 962 online stores

By
Publish Date

A July 4 Magecart card-skimming attack successfully infiltrated 962 online stores in what researchers are calling the largest 24-hour automated Magecart campaign to date. Researchers from Sanguine Security Labs who detected the attack reported it via Twitter, and uploaded the JavaScript-based skimmer code to GitHub. Sanguine Security researcher Willem de Groot told BleepingComputer that the campaign…

APTs/cyberespionage, Cybercrime, Malware, Phishing, Security News, Web Services Security, E-Commerce Security, Website/Web Server Security

Fake Facebook political pages tricked Libyans into downloading RATs

By
Publish Date

A mysterious hacker has for years been tricking Libyan citizens into infecting themselves with mobile and desktop malware by luring them to weaponized Facebook pages that impersonate key local figures and purport to deliver news of interest to the civil war-torn nation’s people. Researchers from Check Point Software Technologies have traced the campaign – dubbed…

Cloud Security, Data Breach, Security News, Web Services Security, E-Commerce Security

Data management firm exposed client info on open Amazon S3 buckets: researchers

By
Publish Date

Data from Netflix, TD Bank, Ford and other companies was left exposed for an unknown period of time on publicly configured cloud storage buckets operated by data integration and management company Attunity, according to the research team that discovered the error. A researcher from UpGuard’s Data Breach Research team found the three publicly accessible Amazon…

Next post in Cloud Security