Magento Campaign Infects 953 Online Stores Across Five Domains
2026-10-27T08:51:37Z•4e7bbd12000b24d11f0c2940f919185d621c07f6aea4c3d92149c31ab3ba8d74
CVE-2026-109618CVE-2026-109619AI securityAI-generated attacksAndroid spywareMagentoNFC fraudNorth KoreaPHPPHP2Shellactive exploitationbank fraudcredential thefte-commercemalwareremote code executionsupply chain securityuCreaterweb-skimming
What happened
Security Affairs feed covering active cyber threats and emerging security issues, including a Magento payment-skimming campaign affecting 953 stores, AI-assisted bank fraud, rentable Android spyware, suspected North Korean exploitation of critical PHP vulnerabilities, and security boundary incidents involving AI agents. The most urgent items are the actively exploited PHP flaws CVE-2026-109618 and CVE-2026-109619, rated CVSS 9.2, and the widespread Magento compromise.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 4e7bbd12000b24d11f0c2940f919185d621c07f6aea4c3d92149c31ab3ba8d74
- Enrichment time
- 2026-10-27T08:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.