eCommerce platforms face AI-powered cyber threats for 2025 season
Organisations opera…
#NewsBeep #News #Headlines #Artificialintelligence(AI) #black-friday #christmas #cyberattacks #CyberThreat #Cybercrime #cybersecurity #digitalwallets #eCommerce(e-Commerce) #Fraud #holidayseason #IL #Israel #Magecart #Magento #Multi-factorauthentication(MFA) #OnlineShopping #PaymentTechnologies #phishing #SearchEngineOptimisation(SEO) #VirtualPrivateNetworks(VPNs) #WooCommerce
https://www.newsbeep.com/273216/
Source: Recorded Future / Insikt Group. Dans un rapport publié le 28 août 2025, le chercheur détaille les tendances vulnérabilités et malwares observées au 1er semestre 2025, avec un focus sur l’exploitation des systèmes exposés, l’évolution des outils et TTPs, et les menaces mobiles et e‑commerce. Principaux constats vulnérabilités: 23 667 CVE publiées (+16% vs H1 2024), 161 vulnérabilités activement exploitées dont 42% avec PoC public, 69% sans authentification et 30% RCE. Microsoft concentre le plus grand nombre d’exploits (17% des cas), à égalité avec les appliances périmétriques (SSL‑VPN, NGFW, portails d’accès). Plus de la moitié des exploitations attribuées impliquent des acteurs étatiques; les failles d’Ivanti sont particulièrement visées (ex. CVE‑2025‑0282). Post‑exploitation, Cobalt Strike domine, suivi de Vshell RAT; les backdoors représentent ~23% des charges.
This #Magecart smart contract got updated recently and is now pointing to keritysuc[.]xyz
While investigating an infected website, we noticed call to BSC testnet contract 0x0967296defa0fd586c9ede5730380e2b059fab95 : https://testnet.bscscan.com/address/0x0967296defa0fd586c9ede5730380e2b059fab95
The contract’s content is clearly malicious and connects over WebSocket to suckerity[.]xyz (behind Cloudflare), not related to #ClearFake, but reminds us #Magecart related injections:
🚨 Did you know that cybercriminals are casually chatting within compromised code to split profits? 😳 The "Mongolian Skimmer" campaign reveals just that, using JavaScript obfuscation and anti-debugging tactics to evade detection.
🔒 Cybersecurity Tip: Stay ahead of threats by regularly auditing your JavaScript for obfuscated code and setting strong Content Security Policies (CSPs) to prevent unauthorized scripts from running.
🛡️ How confident are you in the security of your client-side scripts? Have you seen anything suspicious lately? Let’s discuss!
📖 Dive deeper into the story and learn how to protect yourself: https://guardiansofcyber.com/threats-vulnerabilities/the-mongolian-skimmer-inside-a-javascript-skimming-campaign-using-obfuscation-and-anti-debugging-tactics/
#Cybersecurity #GuardiansOfCyber #Guardians #JavaScriptSecurity #SkimmingAttacks #WebSecurity #ClientSideSecurity #Magecart #ThreatIntelligence #CyberThreats
News Beep
ITSEC News
CyberVeille.ch
ThreatCat.ch
Tarnkappe.info
Tech Cybersecurity Nieuws
Gi7w0rm
Guardians Of Cyber