Over 4,000 Adobe Commerce, Magento shops hacked in CosmicSting attacks

Adobe Commerce and Magento stores are being widely compromised by the 'CosmicSting' vulnerability (CVE-2024-34102), which when chained with CVE-2024-2961 can enable remote code execution; attackers have injected payment-skimming JavaScript to steal credit card and customer data from roughly 4,275 sites, multiple financially motivated groups are involved, and Adobe/Sansec have issued patches and emergency hotfixes.