Retail & E-commerce — Cybersecurity News & Threat Intelligence

6 articlesUpdated 3 Oct 2026

ThreatsCloud & SaaSCritical

HPE Fixes 18 Instant On Access Point Flaws, Including Unauthenticated RCE Bugs

HPE bulletin HPESBNW05150 fixes 18 Instant On AP flaws, including two CVSS 9.8 unauthenticated RCE bugs (CVE-2026-76721, CVE-2026-76722). Update to 3.4.2.0.

3 Oct 20265 min read

Aisha Noor

ThreatsIndustrial & OTCritical
SAP Security Patch Day Addresses Critical NetWeaver Message Server Authentication Bypass
SAP released security updates for CVE-2026-58240, a CVSS 9.6 authentication bypass in NetWeaver AS Java/ABAP Message Server that permits enterprise takeover.
Aisha Noor14 Sep 20268 min read
ThreatsRetail & E-commerceCritical
Adobe warns of exploited Commerce and Magento RCE — patch CVE-2026-75650 now
Adobe says attackers are exploiting a critical, unauthenticated Commerce and Magento flaw. Merchants should apply the vendor hotfix and rotate exposed secrets.
Priya Raman13 Sep 20266 min read
ThreatsTelecom & MediaHigh
Attackers exploit Google Play Early Access loop to distribute deceptive malware apps to millions
Bitdefender reveals threat actors are exploiting Google Play’s Early Access program to bypass user reviews and star ratings, pushing deceptive apps with over 1M downloads.
Aisha Noor12 Sep 20265 min read
ThreatsBanking & FintechHigh
Infostealers harvested 1.7 billion credentials in six months as Vidar and Lumma dominate
Researchers logged 7.4 million infected devices between January and June 2026 — a 27% jump — as the infostealer market matured into a fully automated criminal supply chain.
Mei-Lin Chen3 Sep 20267 min read
Cyber AttackTransport & Logistics
CEVA Logistics cyberattack halts shipping across eight European warehouses
A cyberattack on CEVA Logistics stopped goods moving out of eight European sites, delaying deliveries for major customers and reviving hard questions about logistics resilience.
CST Editorial Desk1 Sep 20265 min read

Threat scope

Magecart skimming, payment card breaches, POS malware, customer database leaks and supply networks.

Free newsletter

The Daily Brief

The exploited vulnerabilities, patch priorities and regulatory changes worth acting on, in one short email.

Exploited CVEs, with affected products and patch status
Patch priorities ranked by real-world exploitation
Regulatory changes: CERT-In, RBI, DPDP, DORA, NIS2

FreeOne email per weekdayUnsubscribe anytime

See a sample issue Privacy policy

HPE Fixes 18 Instant On Access Point Flaws, Including Unauthenticated RCE Bugs

SAP Security Patch Day Addresses Critical NetWeaver Message Server Authentication Bypass

Adobe warns of exploited Commerce and Magento RCE — patch CVE-2026-75650 now

Attackers exploit Google Play Early Access loop to distribute deceptive malware apps to millions

Infostealers harvested 1.7 billion credentials in six months as Vidar and Lumma dominate

CEVA Logistics cyberattack halts shipping across eight European warehouses