/industries/consumer-retail/Cyber threat intelligence for the Consumer & Retail industry — daily-brief items tagged to this slice./briefings/2026/09/10/2026-09-10/2026-09-10-GT Distributors, a national law-enforcement/tactical-gear diThu, 10 Sep 2026 06:00:00 +0000GT Distributors, a national law-enforcement/tactical-gear distributor, listed on Play's leak site Sep 8. 🟥 Unverified DLS claim — verify before treating as a breach; data scope unconfirmed. RedPacketSecurity [⚠️ CRITICAL BREACHES & INCIDENTS]/briefings/2026/09/09/2026-09-09/2026-09-09-Yesterday's N-able N-central and Adobe Commerce/Magento zeroWed, 09 Sep 2026 06:00:00 +0000Yesterday's N-able N-central and Adobe Commerce/Magento zero-days both formalized into CISA's KEV catalog Sep 8 — Magento's flaw finally has a CVE (CVE-2026-75650). No new technical detail beyond what was reported Sep 8 (see yesterday's briefing); this is the federal-mandate follow-through: both are now subject to BOD 26-04's risk-tiered remediation clock, which can compress to as little as three calendar days for flaws that grant full device control on exposed assets. CISA KEV [🔓 CRITICAL VULNERABILITIES]/briefings/2026/09/08/2026-09-08/2026-09-08-"StyleSmuggler" zero-day backdoors Magento and Adobe CommercTue, 08 Sep 2026 06:00:00 +0000"StyleSmuggler" zero-day backdoors Magento and Adobe Commerce stores — every current version affected, no authentication required, fully patched stores compromised — Dutch e-commerce security firm Sansec disclosed the flaw Sep 5 after observing live attacks beginning Sep 4; a two-stage chain injects PHP code via a failure report, then executes it through a failed-payment email, installing a Rust-written backdoor disguised as a kernel worker process. The first confirmed victim was running the latest 2.4.9 release with July and August patches fully applied — patch currency provided no protection. Adobe shipped a hotfix Sep 7, three days after exploitation began, but as of Sep 7 no CVE identifier had been assigned. Any Magento/Adobe Commerce store should assume compromise until the hotfix is applied and logs reviewed for the disguised process. The Hacker News · Sansec [⚠️ CRITICAL BREACHES & INCIDENTS]/briefings/2026/09/08/2026-09-08/2026-09-08-The StyleSmuggler zero-day landing three months before peak Tue, 08 Sep 2026 06:00:00 +0000The StyleSmuggler zero-day landing three months before peak holiday e-commerce volume is an economic timing problem as much as a technical one. Every current Magento and Adobe Commerce release was vulnerable, including fully patched installations, which means store operators cannot simply point to their patch cadence as a defense — the flaw itself, not operator negligence, was the exposure. E-commerce platforms sit at the intersection of payment-card data, customer PII, and revenue continuity; a backdoor with three days of unauthenticated pre-patch access across an entire platform's install base is the kind of infrastructure-level fragility that a single vendor's fix timeline cannot fully absorb once holiday traffic multiplies the blast radius of any residual compromise. The Hacker News [🌍 GEOPOLITICS]