What happened A newly disclosed vulnerability dubbed PolyShell affects stable Magento Open Source and Adobe Commerce version 2 installations and can allow unauthenticated remote code execution or account takeover, depending on server ...

What happened A large-scale cyberattack campaign compromised more than 7,500 Magento-powered websites since late February 2026, with attackers uploading hidden malicious or defacement files into publicly accessible directories across affected servers. The ...