300,000 online retailers at risk from Magento security flaw enabling attackers to take control of ecommerce sites

Nicholas Fearn
clock • 2 min read

Magento rushes out patch for critical vulnerability to protect open source and commercial versions of its ecommerce software

Security researchers have discovered a critical vulnerability in the Magento e-commerce platform that leaves up to 300,000 websites at risk of card-skimming attacks. With the PRODSECBUG-2198 SQL...

To continue reading this article...

Join Computing

  • Unlimited access to real-time news, analysis and opinion from the technology industry
  • Receive important and breaking news in our daily newsletter
  • Be the first to hear about our events and awards programmes
  • Join live member only interviews with IT leaders at the ‘IT Lounge’; your chance to ask your burning tech questions and have them answered
  • Access to the Computing Delta hub providing market intelligence and research
  • Receive our members-only newsletter with exclusive opinion pieces from senior IT Leaders

Join now

 

Already a Computing member?

Login

You may also like
UK and India announce joint Technology Security Initiative

Government

Countries say the new initiative to drive economic growth, create jobs and strengthen the bilateral relationship

clock 26 July 2024 • 3 min read
ChatGPT's Mac app exposed user conversations

Threats and Risks

Stored conversations in plain text

clock 08 July 2024 • 2 min read
NSO's Pegasus spyware used to hack exiled Russian journalist

Hacking

Galina Timchenko led a media outlet Moscow declared ‘undesirable’

clock 14 September 2023 • 2 min read
Most read

Sign up to our newsletter

The best news, stories, features and photos from the day in one perfectly formed email.

More on Security

Microsoft offers advice on avoiding another CrowdStrike-style outage

Microsoft offers advice on avoiding another CrowdStrike-style outage

Vendors should minimise use of kernel mode, customers should make full use of integrated Windows security features

John Leonard
clock 29 July 2024 • 3 min read
'Gay furry hackers' breach conservative US think tank behind Project 2025

'Gay furry hackers' breach conservative US think tank behind Project 2025

Heritage Foundation calls group "degenerate perverts"

Tom Allen
clock 11 July 2024 • 2 min read
Why 'change' for the UK must include cybersecurity

Why 'change' for the UK must include cybersecurity

Labour needs to to get ahead and demonstrate a commitment to security from the outset

Rick Jones
clock 11 July 2024 • 4 min read