Hackers Infect 953 Online Stores With Scanner-Evading JavaScript, Mostly on Magento
2026-10-27T01:23:59Z•57a03eda4c2518983609f21ac2567c4fbc35a1ec06211970682f50fe08581bc8
CVE-2026-110447CVE-2026-111497CVE-2026-115560APT41BrotliCISA-KEVGitHubMagentoMicrosoft-365PHPSandwormUEFI-bootkitWasmtimeactive-exploitationidentity-attacksmalwareransomwarercesupply-chain-securitytoken-theftvulnerability-managementweb-skimming
What happened
The document is a cybersecurity news feed covering active exploitation, critical vulnerabilities, malware campaigns, supply-chain compromises, identity attacks, ransomware, and nation-state operations. Highlighted issues include CVE-2026-111497 in Brotli affecting multiple ecosystems, actively exploited Collabora Online and Arista VeloCloud flaws, PHP RCE vulnerabilities, Wasmtime sandbox escapes, GitHub token abuse, Microsoft 365 token replay, UEFI bootkits, and attacks against firewalls and VPNs.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 57a03eda4c2518983609f21ac2567c4fbc35a1ec06211970682f50fe08581bc8
- Enrichment time
- 2026-10-27T01:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.