Hackers inject malicious JS in Cisco store to steal credit cards, credentials

Cisco's branded merchandise website was compromised with obfuscated JavaScript that exfiltrates checkout information (credit card details, postal address, phone, email, and login credentials). Researchers link the compromise to the CosmicSting XXE vulnerability (CVE-2024-34102) in Adobe Commerce/Magento; the malicious script was delivered from a newly registered domain and the site has been taken offline while impacted users are being notified.