Magento Campaign Infects 953 Online Stores Across Five Domains
2026-10-27T02:51:37Z•a5bc62c9a9fa5257a58004f1c30062fa943ae24022388fe4f6b1ed0b0024ec35
CVE-2026-109618CVE-2026-109619AI-assisted-attacksAI-generated-voiceAI-securityAPTAndroid-malwareMagentoNorth KoreaOTP-interceptionPHPcloud-securitycredential-theftcyber-fraude-commercepayment-card-theftsocial-engineeringspywareuCreaterweb-server-exploitationweb-skimming
What happened
Security Affairs feed covering major cybersecurity developments, including a Magento payment-skimming campaign affecting 953 stores, AI-assisted bank fraud, rentable Android spyware targeting messaging and wallet data, suspected North Korean exploitation of critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619, and security incidents involving frontier AI systems. The highest-risk item is active exploitation of critical PHP flaws, reportedly targeting 216 vulnerable hosts.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- a5bc62c9a9fa5257a58004f1c30062fa943ae24022388fe4f6b1ed0b0024ec35
- Enrichment time
- 2026-10-27T02:51:37Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.