Adobe Commerce PolyShell Attacks Breach Hundreds of Stores as Brotli Exploit Traffic Emerges

CISA has added two critical vulnerabilities impacting Adobe Commerce, Magento, and Google's Brotli decoder library to its Known Exploited Vulnerabilities catalog following reports of active exploitation. Threat intelligence and security firms observed attackers leveraging the PolyShell flaw in Adobe Commerce to breach hundreds of stores, alongside early exploit traffic targeting the Node2Shell flaw in Brotli. Numerous vendors have released patches or advisories as a result of the widespread open-source dependency. Open article →