Attackers Exploit Unpatched Magento Zero-Day to Backdoor Online Stores

Attackers are exploiting an unpatched remote code execution flaw in Adobe Commerce and Magento Open Source to install persistent backdoors on e-commerce sites, Dutch security firm Sansec reported, with the first intrusions observed Sept. 4 and no vendor fix available as of Sept. 6. Sansec's forensics team, in an advisory, named the flaw...