Hackers hijack Convertr analytics script to steal payment card data
Teaser from the source
A credit card skimming group reportedly compromised a shared analytics script used by e-commerce platform Convertr to steal shoppers' payment data during checkout. [...]
This is the RSS-feed teaser. Read the full article at the original source.
Read at BleepingComputerMore on analytics
Other advisories
- HighCVE-2026-104744Independent Analytics Pro: Cross-Site-Scripting (XSS)
- HighCVE-2026-104744Independent Analytics Pro: Cross-Site-Scripting (XSS)
- MediumCVE-2026-119646Open Web Analytics: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- Not ratedosv:CVE-2026-119646Open Web Analytics before 1.14.1 Cross-Site Data Disclosure via REST Report API
- MediumCVE-2026-119646Open Web Analytics: Umgehung der Autorisierung über nutzergesteuerten Schlüssel
- MediumCVE-2026-119565Plausible Analytics: unkontrollierte Änderung von Objektattributen
- MediumCVE-2026-119564Plausible Analytics: vertrauliche Informationen in übertragenen Daten
- MediumCVE-2026-119565Plausible Analytics: unkontrollierte Änderung von Objektattributen
Other news entries
- Chainalysis discloses data breach from "offensive agentic techniques"NewsBleepingComputer
- Chainalysis says an attacker using agentic techniques accessed its systems; customer user names, emails and roles exposedBreachpwn.watch
- Amplitude analytics security incident exposes Coinbase customer contact dataBreachpwn.watch
- Magecart skimmer planted in Convertr's self-hosted Plausible tracker hits Brazilian checkoutsBreachpwn.watch
- KNIME Analytics Platform: Schwachstelle ermöglicht Offenlegung von InformationenVulnerabilityBSI CERT-Bund
- NCSC-2026-0445 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle AnalyticsNewsNCSC-NL
- MITRE ATT&CK v20 Catalogs AI Abuse, MFA Bypass, Water Utility AttacksNewsSecurityWeek
- NCSC-2026-0379 [1.00] [M/H] Kwetsbaarheden verholpen in Oracle AnalyticsNewsNCSC-NL
ID