LUCAMEThe US cybersecurity agency CISA has confirmed that two vulnerabilities are being actively exploited in the wild. One affects Adobe Commerce and Magento, the popular e-commerce platforms. The other is in Google's Brotli compression library, which is embedded in a wide range of software and web servers. Both are being used by attackers right now, not just flagged as theoretical risks.
What this means for your business
If your business runs a Magento or Adobe Commerce storefront, you'll want to make sure it's fully patched as a priority. The Brotli issue is trickier because it's baked into a lot of software you might not think of as vulnerable, including some web servers and browsers, so it's worth checking with your IT provider whether any systems you rely on are affected and whether updates are available.