The North Face has suffered its fourth credential stuffing attack since 2020, with the latest breach detected on April 23, 2025. Attackers accessed customer information including names, purchase histories, addresses, emails, birth dates, and phone numbers, though payment data remained secu...
A major supply chain attack has compromised 500-1,000 e-commerce websites through 21 backdoored Magento extensions from three vendors: Tigren, Meetanshi, and MGS. The malicious code, inserted as far back as 2019, remained dormant until April 2025 when attackers activated it. The backdoor, ...
This sophisticated web skimming campaign exploits Stripe's deprecated API to validate payment data before theft, ensuring only valid card information reaches attackers. Active since August 2024, the operation has compromised 49 merchants through a multi-stage attack that intercepts legitim...
