Filtered eCommerce news

Action neededAdobe Commerce · News· 27 Oct

Adobe Commerce and Magento Open Source stores: install the July security patch

In plain English

The US cybersecurity agency (CISA) has added a vulnerability nicknamed "PolyShell" to its list of known exploited flaws. It affects Adobe Commerce and Magento Open Source stores that haven't installed recent security updates. Adobe released a fix in its July 2026 security update.

For founders, developers
What to do
  1. 1Confirm the July 2026 patch is installed
  2. 2Apply the October patch and hotfix too
  3. 3Check for anything added before patching
Don’t miss

Latest

Newest first · Last update 11 hours ago
Action neededAdobe Commerce

How to check your Adobe Commerce or Magento store for hidden scripts

Security researchers at Sansec report finding unwanted scripts on 953 online stores, most running Magento Open Source or Adobe Commerce, many of which had missed recent security updates. The scripts were hidden inside the stores' content blocks, which makes them harder for standard scans to spot.

26 Oct · For founders, developers
Action neededBigCommerce

BigCommerce merchants: review your third-party apps after the Ribon incident

BigCommerce has told merchants that a third-party app called Ribon had its access keys misused between 13 and 17 September, which exposed some shopper data in stores using the app. BigCommerce says its own platform was not affected, and it has removed the app.

21 Sept · For founders, developers