Connect with us

Tech

Hackers are exploiting a vulnerability in lots of e-commerce sites

Published

on

Fish-eye lens view of a computer screen with hacking stuff on it

Hackers have found their way into a large number of internet e-commerce sites.

This latest cybersecurity threat targets web stores running on the Magento or Adobe Commerce platforms, according to BleepingComputer, which cited the security firm Sansec as first publicizing the exploit. That was just over a week ago, and since Sansec exposed the vulnerability, known as PolyShell, the firm claimed that 56 percent of vulnerable stores have been experienced attacks.

You can check out Sansec's analysis for the full technical details of what's going on, but in the simplest terms possible, it seems hackers have managed to insert a credit card skimmer into the API for Magento, an open-source e-commerce platform acquired by Adobe several years ago. Sansec says it spotted the attack being used on an unnamed "major car manufacturer."

We have contacted Adobe for comment and will update this story if they respond.

Adobe has released a fix for this in the beta branch of its software, but that doesn't help the presumably vast majority of sites running the non-beta version of the software. Until the fix goes public, this will be an issue for any site running Magento or Adobe Commerce.

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech

Is your phone gross? Watch this.

Published

on

By

how to clean phone, disinfectants, wipes, compressed air

Spring cleaning your phone goes beyond just wiping down the screen. Iyaz walks through how to safely clean and disinfect your phone and earbuds to remove built-up grime and bacteria, while also showing how to clean inside your device by clearing unused apps and using built-in Android and iOS tools to free up space and improve performance.

Continue Reading

Tech

Former Meta employee accused of downloading 30,000 private user images

Published

on

By

A phone displays a Facebook logo. The Meta logo is reflected across the screen.

London's cybercrime unit is investigating a former Meta employee who allegedly downloaded more than 30,000 private user images from personal Facebook pages.

Police say the employee, a company engineer, allegedly designed a script that allowed his activity to go undetected by internal security systems, according to court documents reviewed by The Guardian.

The incident was discovered by the company over a year ago, Meta explained in a statement to the BBC. In addition to terminating the employee, Meta notified affected Facebook users and updated its security protocols. Meta then referred the case to the UK police, and authorities arrested the man in November.

"After discovering improper access by an employee over a year ago, we immediately terminated the individual, notified users, referred the matter to law enforcement and enhanced our security measures," the company said to the press. "We are co-operating with the ongoing investigation."

Meta has previously been accused of failing to appropriately notify users of privacy policies and how their data is accessed by the company, including recent concerns about Meta AI chatbot prompts being made visible to the public.

Last month, an investigation found that offshore Meta workers in Kenya were being forced to review personal recordings taken by Meta Ray-Ban glasses wearers — videos that were being shared unbeknownst to users to train the company's AI. In January, a group of international plaintiffs and whistleblowers filed a lawsuit against Meta, alleging that private WhatsApp conversations, which are end-to-end encrypted, were being accessed and analyzed by Meta employees. The company has denied the allegation.

Don’t miss out on our latest stories: Add Mashable as a trusted news source in Google.

Continue Reading

Tech

Best Buy is giving away a Super Mario Bros. 40th anniversary collectible game case for free — how to claim

Published

on

By

Nintendo Super Mario Bros. collectible case with colorful background

GET A FREE COLLECTIBLE GAME CASE: As of April 8, you can pick up a slick Super Mario Bros. 40th anniversary collectible game case for free at Best Buy when you purchase two select Mario titles for Nintendo Switch and Switch 2.



Super Mario Bros. 40th anniversary collectible case

Credit: Nintendo

free when you buy any 2 Mario titles at Best Buy

There's a lot of Mario talk lately between The Super Mario Galaxy Movie, the Super Mario Bros. Wonder Switch 2 Edition release, and the 40th anniversary of the nostalgic Nintendo mascot. And Best Buy wants in on the conversation. For a limited time, the retailer is giving away free Super Mario Bros. 40th anniversary collectible game cases. Here's how you can claim yours.

There's limited quantities of these slick collectible cases, so you'll want to act semi-quickly if you want to ensure you get one. All you have to do to qualify is purchase two select Mario titles for Nintendo Switch or Switch 2 at Best Buy. Once you add two to your cart, you'll see the game case added automatically for $0 (a $20 value). It can hold 24 games and showcases photos of Mario himself over the years.

There's plenty of excellent games included in the list, including Super Mario Bros. Wonder Nintendo Switch 2 Edition + Meetup in Bellabel Park, Mario Kart World for Nintendo Switch 2, Super Mario Galaxy + Super Mario Galaxy 2 for Nintendo Switch, and Mario Party Superstars for Nintendo Switch. Most of them are at full price, which is kind of a bummer, but we do think the majority of them are worth the money.

Regardless, this is your chance to celebrate four decades of Mario and get some sick merch to go along with it. And a free gift is a free gift!

Continue Reading

Trending