News Summary

A significant supply chain attack has compromised hundreds of e-commerce sites, including those from a large multinational company, by exploiting vulnerabilities in software from three providers: Tigren, Magesolution (MGS), and Meetanshi. These providers offer software based on Magento, an open-source e-commerce platform. The attack, which remained dormant for six years, involves malware that executes code in visitors’ browsers to steal payment card information. Sansec, a security firm, discovered the breach and reported that hundreds of sites have been affected, with a potential for the number to be much higher. The backdoor allows attackers to execute arbitrary PHP code, posing a severe risk to users’ data security.