TLDR InfoSec · ATTACKS & VULNERABILITIES

THOUSANDS OF ADOBE COMMERCE E-STORES HACKED BY EXPLOITING THE COSMICSTING BUG

securityaffairs.com3 min read

Summary from the TLDR InfoSec newsletter

Over 4,000 Adobe Commerce and Magento e-stores were hacked due to a critical vulnerability, CosmicSting (CVE-2024-34102), which allows attackers to execute arbitrary code. The attacks have impacted major organizations and resulted in the installation of payment skimmers on victim stores. Merchants are urged to update their systems immediately to protect against these exploits.