7,500+ Magento sites defaced in global hacking campaign
2026-03-21T08:51:49Z•8b84b844843db7d11189db5ff24f9d3952a176196542058392b14c9457d85560
cisco-fmccorunacve-2025-66376cve-2026-20131darksworddata-breachinterlock-ransomwareios-exploit-kitiot-botnetsknown-exploited-vulnerabilitylaw-enforcement-takedownmagento-defacementopsecpii-exposureubiquiti-unifiweb-defacementzero-dayzimbra
What happened
Multiple high-impact security stories: a large-scale campaign has defaced over 7,500 Magento sites (affecting ~15,000 hostnames); Navia Benefit Solutions disclosed a data breach impacting ~2.7 million people; and Apple warned of active iOS exploit kits (DarkSword, Coruna) prompting urgent updates. Critical vulnerabilities are highlighted: Cisco Secure Firewall Management Center/SCC flaw CVE-2026-20131 (reported CVSS 10.0) is in active exploitation (Interlock ransomware) and added to CISA’s KEV catalog, and a Zimbra XSS (CVE-2025-66376) is being exploited by a Russia-linked APT. Additional news
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 8b84b844843db7d11189db5ff24f9d3952a176196542058392b14c9457d85560
- Enrichment time
- 2026-03-21T08:51:49Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.