953 Online Stores Infected in Long-Lasting Malware Campaign

2026-10-26T13:24:00Z•6b4397b378797887dd89f5d8e1647efd70a222cd189b242f9f8061a6c63c61f9
AI securityArista VeloCloud OrchestratorBrotliCapcomChina APTConnectWiseMicrosoftMirai botnetNFC relay fraudNode.jsPHP2ShellPythonSQL injectiondata breachfinancial fraudmalware campaignonline storesout-of-bounds writeremote code executionweb skimmingzero-day

What happened

SecurityWeek RSS feed covering active cyber threats and security developments, including a long-running malware campaign compromising 953 online stores, NFC relay fraud exceeding $400,000, the potentially exploitable Brotli out-of-bounds write affecting multiple ecosystems, exploitation of a critical Arista VeloCloud Orchestrator SQL injection zero-day, China-linked ConnectWise attacks, Mirai-associated PHP2Shell activity, and a Capcom breach affecting up to 11 million people.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityweek
Record identifier
6b4397b378797887dd89f5d8e1647efd70a222cd189b242f9f8061a6c63c61f9
Enrichment time
2026-10-26T13:24:00Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.