Archive

NameMgt_VarnishVulnerable1.0.10 and earlierFixed in1.

🔴 Severity: CRITICAL (CVSS 9.

🔴 Severity: CRITICAL (CVSS 9.

🔴 Severity: CRITICAL (CVSS 9.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

Read Full Article on Akamai Blog →

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 4.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

/archive/

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🟡 Severity: MEDIUM (CVSS 5.

🔴 Severity: CRITICAL (CVSS 9.

Magento-lts is a long-term support alternative to Magento Community Edition (CE).

Read Full Article on Akamai Blog →

Read Full Article on Akamai Blog →

🔴 Severity: CRITICAL (CVSS 9.

🔴 Severity: CRITICAL (CVSS 10.

🔴 Severity: CRITICAL (CVSS 9.

Six weeks after Adobe’s emergency patch for SessionReaper (CVE-2025-54236), the vulnerability has entered active exploitation.

🟡 Severity: MEDIUM (CVSS 4.

🟡 Severity: MEDIUM (CVSS 6.

🟡 Severity: MEDIUM (CVSS 5.

🟠 Severity: HIGH (CVSS 8.

🟠 Severity: HIGH (CVSS 8.

Bulletin Information Bulletin ID: APSB25-94 Product: APSB25-94: Security update available for Adobe Commerce Published: October 14, 2025 Priority: 2 Severity: Critical CVE Count: 5 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB25-90 Product: APSB25-90: Security update available for Adobe Experience Manager Published: September 09, 2025 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB25-88 Product: APSB25-88: Security update available for Adobe Commerce Published: September 09, 2025 Priority: 1 Severity: Critical CVE Count: 1 Affected Versions Adobe Commerce: 2.

October 22nd: mass SessionReaper attacks have startedIn August 2025, a critical (CVSS 9.

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview This release includes the following highlights:

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

⚠️ ALPHA RELEASE - This is a pre-release version for testing purposes.

⚠️ ALPHA RELEASE - This is a pre-release version for testing purposes.

⚠️ ALPHA RELEASE - This is a pre-release version for testing purposes.

⚠️ ALPHA RELEASE - This is a pre-release version for testing purposes.

⚠️ ALPHA RELEASE - This is a pre-release version for testing purposes.

Bulletin Information Bulletin ID: APSB25-71 Product: APSB25-71: Security update available for Adobe Commerce Published: August 12, 2025 Priority: 2 Severity: Critical CVE Count: 6 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB25-82 Product: APSB25-82 :Security update available for Adobe AEM Forms Published: August 05, 2025 Priority: 1 Affected Versions Adobe Experience Manager (AEM) Forms on JEE: 6.

Bulletin Information Bulletin ID: APSB25-67 Product: APSB25-67: Security update available for Adobe AEM Forms Published: July 08, 2025 Priority: 1 Affected Versions Adobe Experience Manager (AEM) Forms on JEE: 6.

Adobe has just released several security fixes for its Commerce (Magento) platform and one of them is critical (CVE-2025-47110).

Bulletin Information Bulletin ID: APSB25-50 Product: APSB25-50: Security update available for Adobe Commerce Published: June 10, 2025 Priority: 1 Severity: Critical CVE Count: 7 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB25-48 Product: APSB25-48: Security update available for Adobe Experience Manager Published: June 10, 2025 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Hundreds of stores, including a $40 billion multinational, are running backdoored versions of popular ecommerce software.

Bulletin Information Bulletin ID: APSB25-27 Product: APSB25-27: Security update available for Adobe AEM Forms Published: April 08, 2025 Priority: 2 Affected Versions Adobe Experience Manager (AEM) Forms on JEE: 6.

Bulletin Information Bulletin ID: APSB25-26 Product: APSB25-26: Security update available for Adobe Commerce Published: April 08, 2025 Priority: 2 Severity: Important CVE Count: 5 Affected Versions Adobe Commerce: 2.

The Sansec Shield WAF detected mass scans for “defunct.

Overview Adobe Commerce 2.

The new PCI-DSS regulations that will come into effect after March 31st, 2025, require merchants to monitor scripts on their payment pages to prevent digital skimming attacks*.

It’s insanity that we still don’t have clarity(Clean_Anteater992)They have to be kidding me (sawer82)It’s clusterf after clusterf (andrew_barratt)The Payment Card Industry Security Stan…

APSB25-08 released on Feb 11th, 2025Critical Adobe Commerce/Magento security patches have just been released (CVSS 9.

Bulletin Information Bulletin ID: APSB25-08 Product: APSB25-08: Security update available for Adobe Commerce Published: February 11, 2025 Priority: 1 Severity: Critical CVE Count: 31 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB25-08 Published: February 11, 2025 Priority: 1 Severity: Critical CVE Count: 31 Affected Versions Adobe Commerce: 2.

Merchants spend millions of dollars on client-side security solutions to prevent digital skimming attacks.

Merchants spend millions of dollars on client-side security solutions to prevent digital skimming attacks.

Google TranslateAttackers are using Google Translate’s page functionality to execute malicious JavaScript files, as demonstrated below:<script src=“https://translate.

Google TranslateAttackers are using Google Translate’s page functionality to execute malicious JavaScript files, as demonstrated below:<script src=“https://translate.

Bulletin Information Bulletin ID: APSB24-69 Product: APSB24-69: Security update available for Adobe Experience Manager Published: December 10, 2024 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB24-90 Product: APSB24-90: Security update available for Adobe Commerce Published: November 12, 2024 Priority: 3 Severity: Critical CVE Count: 1 Affected Versions Adobe Commerce and Magento Open Source powered by Commerce Services and …

Bulletin Information Bulletin ID: APSB24-90 Published: November 12, 2024 Priority: 3 Severity: Critical CVE Count: 1 Affected Versions Adobe Commerce and Magento Open Source powered by Commerce Services and deployed as SaaS (software as a service).

Bulletin Information Bulletin ID: APSB24-73 Product: APSB24-73: Security update available for Adobe Commerce Published: October 08, 2024 Priority: 2 Severity: Critical CVE Count: 22 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB24-73 Published: October 08, 2024 Priority: 2 Severity: Critical CVE Count: 22 Affected Versions Adobe Commerce: 2.

Sansec research shows that seven different groups have been hacking into 4275 online stores since the publication of CVE-2024-34102 (also known as CosmicSting) on June 11th.

Sansec research shows that seven different groups have been hacking into 4275 online stores since the publication of CVE-2024-34102 (also known as CosmicSting) on June 11th.

ImplicationsCosmicSting targets a critical bug in the Adobe Commerce and Magento platforms.

ImplicationsCosmicSting targets a critical bug in the Adobe Commerce and Magento platforms.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview Look for the following highlights in this release.

CosmicSting (CVE-2024-34102) allows arbitrary file reading on unpatched systems.

CosmicSting (CVE-2024-34102) allows arbitrary file reading on unpatched systems.

Bulletin Information Bulletin ID: APSB24-61 Product: APSB24-61: Security update available for Adobe Commerce Published: August 13, 2024 Priority: 3 Severity: Critical CVE Count: 23 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB24-61 Published: August 13, 2024 Priority: 3 Severity: Critical CVE Count: 23 Affected Versions Adobe Commerce: 2.

API AbuseAs CosmicSting enables attackers to read any file, attackers can steal Magento’s secret encryption key.

API AbuseAs CosmicSting enables attackers to read any file, attackers can steal Magento’s secret encryption key.

Update June 28th: We are flagging more domains that have been used by the same actor to spread malware since at least June 2023: bootcdn.

Update June 28th: We are flagging more domains that have been used by the same actor to spread malware since at least June 2023: bootcdn.

Update June 27th: Adobe has now provided an official, isolated fix that can be applied to installations without requiring upgrade.

Update June 27th: Adobe has now provided an official, isolated fix that can be applied to installations without requiring upgrade.

Bulletin Information Bulletin ID: APSB24-40 Product: APSB24-40: Security update available for Adobe Commerce Published: June 11, 2024 Priority: 1 Severity: Critical CVE Count: 10 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB24-40 Published: June 11, 2024 Priority: 1 Severity: Critical CVE Count: 10 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB24-28 Product: APSB24-28: Security update available for Adobe Experience Manager Published: June 11, 2024 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview Look for the following highlights in this release.

Overview Look for the following highlights in this release.

Bulletin Information Bulletin ID: APSB24-21 Product: APSB24-21: Security update available for Adobe Experience Manager Published: April 09, 2024 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB24-18 Product: APSB24-18: Security update available for Adobe Commerce Published: April 09, 2024 Priority: 3 Severity: Critical CVE Count: 2 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB24-18 Published: April 09, 2024 Priority: 3 Severity: Critical CVE Count: 2 Affected Versions Adobe Commerce: 2.

The following XML code was found in the layout_update database table and is responsible for periodic reinfections of your system.

The following XML code was found in the layout_update database table and is responsible for periodic reinfections of your system.

Bulletin Information Bulletin ID: APSB24-05 Product: APSB24-05: Security update available for Adobe Experience Manager Published: March 12, 2024 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

In January we announced our partnership with Europol and today, we are proud to be recognized by Google as experts in eCommerce security.

Overview Look for the following highlights in this release.

Bulletin Information Bulletin ID: APSB24-03 Product: APSB24-03: Security update available for Adobe Commerce Published: February 13, 2024 Priority: 3 Severity: Critical CVE Count: 5 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB24-03 Published: February 13, 2024 Priority: 3 Severity: Critical CVE Count: 5 Affected Versions Adobe Commerce: 2.

In a strategic alliance, Europol, the European Union Agency for Cybersecurity (ENISA), law enforcement from 17 nations, and key private sector entities such as Sansec, have aligned to counteract th…

In recent weeks, Sansec observed a spike in hacked Magento 2 stores.

In recent weeks, Sansec observed a spike in hacked Magento 2 stores.

In recent weeks, Sansec observed a spike in hacked Magento 2 stores.

In recent weeks, Sansec observed a spike in hacked Magento 2 stores.

Bulletin Information Bulletin ID: APSB23-77 Product: APSB23-77: Security update available for Adobe Experience Manager Forms Published: December 15, 2023 Priority: 1 Affected Versions Adobe Experience Manager (AEM) Forms on JEE: 6.

Bulletin Information Bulletin ID: APSB23-72 Product: APSB23-72: Security update available for Adobe Experience Manager Published: December 12, 2023 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB23-50 Product: APSB23-50: Security update available for Adobe Commerce Published: October 10, 2023 Priority: 3 Severity: Critical CVE Count: 9 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB23-50 Published: October 10, 2023 Priority: 3 Severity: Critical CVE Count: 9 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB23-43 Product: APSB23-43: Security update available for Adobe Experience Manager Published: September 12, 2023 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Read Full Article on Akamai Blog →

Read Full Article on Akamai Blog →

Bulletin Information Bulletin ID: APSB23-42 Product: APSB23-42: Security update available for Adobe Commerce Published: August 08, 2023 Priority: 3 Severity: Critical CVE Count: 3 Affected Versions Adobe Commerce: 2.

Overview Look for the following highlights in this release.

Overview Look for the following highlights in this release.

Bulletin Information Bulletin ID: APSB23-35 Product: APSB23-35: Security update available for Adobe Commerce Published: June 13, 2023 Priority: 3 Severity: Critical CVE Count: 12 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB23-31 Product: APSB23-31: Security update available for Adobe Experience Manager Published: June 13, 2023 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB23-18 Product: APSB23-18: Security update available for Adobe Experience Manager Published: March 14, 2023 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB23-17 Product: APSB23-17: Security update available for Adobe Commerce Published: March 14, 2023 Priority: 3 Severity: Critical CVE Count: 4 Affected Versions Adobe Commerce: 2.

Overview Look for the following highlights in this release.

Bulletin Information Bulletin ID: APSB22-59 Product: APSB22-59: Security update available for Adobe Experience Manager Published: December 13, 2022 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB22-48 Product: APSB22-48: Security updates available for Adobe Commerce Published: October 11, 2022 Priority: 3 Severity: Critical Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB22-40 Product: APSB22-40: Security updates available for Experience Manager Published: September 13, 2022 Priority: 3 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Overview Look for the following highlights in this release:

Overview Look for the following highlights in this release:

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Bulletin Information Bulletin ID: APSB22-38 Product: APSB22-38: Security update available for Adobe Commerce Published: August 09, 2022 Priority: 3 Severity: Critical Affected Versions Adobe Commerce: 2.

Overview Look for the following highlights in this release.

Overview Look for the following highlights in this release.

Bulletin Information Bulletin ID: APSB22-13 Product: APSB22-13: Security update available for Adobe Commerce Published: April 12, 2022 Priority: 3 Severity: Critical Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB22-12 Product: APSB22-12: Security update available for Adobe Commerce Published: February 13, 2022 Priority: February 17, 2022 Severity: Critical Affected Versions Adobe Commerce: 2.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Bulletin Information Bulletin ID: APSB21-86 Product: APSB21-86Security update available for Adobe Commerce Published: October 12, 2021 Priority: 2 Affected Versions Adobe Commerce: 2.

Bulletin Information Bulletin ID: APSB21-82 Product: APSB21-82Security update available for Adobe Experience Manager Published: September 14, 2021 Priority: 2 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB21-64 Product: APSB21-64Security updates available for Magento Published: August 11, 2021 Priority: 2 Affected Versions Adobe Commerce: 2.

Overview [PaaS only]{class=“badge informative” title=“Applies to Adobe Commerce on Cloud projects (Adobe-managed PaaS infrastructure) and on-premises projects only.

Overview Look for the following highlights in this release.

Bulletin Information Bulletin ID: APSB21-39 Product: APSB21-39Security update available for Adobe Experience Manager Published: June 08, 2021 Priority: 2 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB21-30 Product: APSB21-30Security updates available for Magento Published: May 11, 2021 Priority: 2 Affected Versions Magento Commerce: 2.

Bulletin Information Bulletin ID: APSB21-15 Product: APSB21-15Security update available for Adobe Experience Manager Published: May 11, 2021 Priority: 2 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Bulletin Information Bulletin ID: APSB21-08 Product: APSB21-08Security updates available for Magento Published: February 09, 2021 Priority: 2 Affected Versions Magento Commerce: 2.

Overview Look for the following highlights in this release.

Bulletin Information Bulletin ID: APSB20-72 Product: APSB20-72Security update available for Adobe Experience Manager Published: December 08, 2020 Priority: 2 Affected Versions Adobe Experience Manager (AEM): AEM Cloud Service (CS) 6.

Overview Look for the following highlights in this release.

Bulletin Information Bulletin ID: APSB20-56 Product: APSB20-56Security update available for Adobe Experience Manager Published: September 08, 2020 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB20-59 Product: APSB20-59Security updates available for Magento Published: August 01, 2020 Priority: 2 Affected Versions Magento Commerce: 2.

Bulletin Information Bulletin ID: APSB20-41 Product: APSB20-41Security updates available for Magento Published: June 22, 2020 Priority: 2 Affected Versions Magento Commerce 1: 1.

Bulletin Information Bulletin ID: APSB20-31 Product: APSB20-31Security update available for Adobe Experience Manager Published: June 09, 2020 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB20-47 Product: APSB20-47Security updates available for Magento Published: June 01, 2020 Priority: 2 Affected Versions Magento Commerce 2: 2.

Bulletin Information Bulletin ID: APSB20-22 Product: APSB20-22Security updates available for Magento Published: April 28, 2020 Priority: 2 Affected Versions Magento Commerce: 2.

Bulletin Information Bulletin ID: APSB20-15 Product: APSB20-15Security update available for Adobe Experience Manager Published: March 17, 2020 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB20-08 Product: APSB20-08Security update available for Adobe Experience Manager Published: February 11, 2020 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB20-02 Product: APSB20-02Security updates available for Magento Published: January 28, 2020 Priority: 2 Affected Versions Magento Commerce: 2.

Bulletin Information Bulletin ID: APSB20-01 Product: APSB20-01Security update available for Adobe Experience Manager Published: January 14, 2020 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB19-50 Product: APSB19-50Security updates available for Adobe Experience Manager Forms Published: October 15, 2019 Priority: 3 Affected Versions Adobe Experience Manager Forms: 6.

Bulletin Information Bulletin ID: APSB19-48 Product: APSB19-48Security update available for Adobe Experience Manager Published: October 15, 2019 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB19-42 Product: APSB19-42Security update available for Adobe Experience Manager Published: August 13, 2019 Priority: 1 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB19-38 Product: APSB19-38Security update available for Adobe Experience Manager Published: July 09, 2019 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB19-24 Product: APSB19-24Security update available for Adobe Experience Manager Forms Published: April 09, 2019 Priority: 2 Affected Versions Adobe Experience Manager Forms: 6.

Bulletin Information Bulletin ID: APSB19-09 Product: APSB19-09Security update available for Adobe Experience Manager Published: January 22, 2019 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB19-03 Product: APSB19-03Security updates available for Adobe Experience Manager Forms Published: January 22, 2019 Priority: 2 Affected Versions Adobe Experience Manager Forms: 6.

Bulletin Information Bulletin ID: APSB18-36 Product: APSB18-36Security update available for Adobe Experience Manager Published: October 09, 2018 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB18-26 Product: APSB18-26Security update available for Adobe Experience Manager Published: August 14, 2018 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB18-23 Product: APSB18-23Security update available for Adobe Experience Manager Published: July 10, 2018 Priority: 2 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB18-10 Product: APSB18-10Security updates available for Adobe Experience Manager Published: April 10, 2018 Priority: 3 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB18-04 Product: APSB18-04Security updates available for Adobe Experience Manager Published: February 13, 2018 Priority: 3 Affected Versions Adobe Experience Manager: 6.

Bulletin Information Bulletin ID: APSB17-16 Product: Security updates available for Adobe Experience Manager Forms Published: March 01, 2017 Priority: Windows, Linux, Solaris and AIX Affected Versions Adobe Experience Manager Forms 6.

Regular Javascript-based malware is normally injected in the static header or footer HTML definitions in the database.

Regular Javascript-based malware is normally injected in the static header or footer HTML definitions in the database.

Regular Javascript-based malware is normally injected in the static header or footer HTML definitions in the database.

Regular Javascript-based malware is normally injected in the static header or footer HTML definitions in the database.

Visbot is one of the oldest Magecart payment skimmers: it steals customer data and credit cards.

Visbot is one of the oldest Magecart payment skimmers: it steals customer data and credit cards.

Visbot is one of the oldest Magecart payment skimmers: it steals customer data and credit cards.

Visbot is one of the oldest Magecart payment skimmers: it steals customer data and credit cards.

Bulletin Information Bulletin ID: APSB16-40 Product: Security updates available for Adobe Experience Manager Forms Published: June 01, 2016 Priority: Windows, Linux, Solaris and AIX Affected Versions Adobe Experience Manager Forms 6.

Criminals have secretly rewired 3,500 online stores to continuously harvest credit card numbers.

Criminals have secretly rewired 3,500 online stores to continuously harvest credit card numbers.

Criminals have secretly rewired 3,500 online stores to continuously harvest credit card numbers.

Criminals have secretly rewired 3,500 online stores to continuously harvest credit card numbers.

Adobe Experience Manager (AEM) is a comprehensive content management solution for building websites, mobile apps, and forms.

Adobe Commerce (formerly Magento) is an enterprise e-commerce platform.

Adobe Experience Manager Forms (AEM Forms) is a powerful solution for creating, managing, and delivering complex digital forms and documents.