Sansec detects attempts to exploit critical Adobe Commerce account-takeover flaw
Founder Willem de Groot's security shop says its WAF is blocking attempts, while Adobe says it has no confirmed in-the-wild exploits.
By RuntimeWire Staff · Published
Primary source: BleepingComputer
Why it matters
Sansec's telemetry suggests attackers are testing a no-login account-takeover path while merchants face a multi-step patch process. Shield may block the request pattern Sansec identified, but Adobe's update is the durable fix.
Founder Willem de Groot's security shop says its WAF is blocking attempts, while Adobe says it has no confirmed in-the-wild exploits.
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.