HUNDREDS OF E-COMMERCE SITES HACKED IN SUPPLY-CHAIN ATTACK

Summary from the TLDR InfoSec newsletter

Malware has backdoored at least 500 e-commerce sites by compromising three software providers (Tigren, Magesolution, and Meetanshi) that supply Magento-based extensions. The dormant malware, active after six years, executes malicious code in visitors' browsers to steal payment information and personal data.