A critical vulnerability known as SessionReaper has been identified in Adobe Commerce, exposing millions of e-commerce sites to session hijacking attacks. This flaw allows attackers to take over user sessions, potentially leading to unauthorized access and data breaches. Adobe has released patches, but many sites remain unpatched, increasing the risk of exploitation. Cybercriminals are actively exploiting this vulnerability, emphasizing the urgent need for organizations to update their systems. The flaw affects Adobe Commerce versions prior to the latest security update, and attackers leverage it to steal sensitive customer information and disrupt online retail operations. Security experts recommend immediate patching, monitoring for suspicious activity, and implementing additional security controls such as multi-factor authentication and web application firewalls. This incident highlights the ongoing challenges in securing e-commerce platforms against sophisticated cyber threats and the importance of proactive vulnerability management.
This Cyber News was published on www.darkreading.com. Publication date: Thu, 23 Oct 2025 21:40:05 +0000