20 points ragu4u 6 hours ago 6 comments

scorxn 4 hours ago | parent

The norforge report sounds like they were targeting magento (e-commerce) sites to steal some $. Darn, was hoping they were trying to swipe DRM keys or something.

bossyTeacher 1 hour ago | parent

Weird. Surely, Wordpress sites are easier targets? Why Magento I wonder? Isn't Shopify more popular?

scorxn 46 minutes ago | parent

Magento is ridiculously complex, open-source, and often self-maintained. It's probably fairly easy to exploit, especially for outdated deployments. And (vs. Wordpress) has payment info to intercept.

jsbisviewtiful 2 hours ago | parent

> John Deere

One of those companies that clearly deserved it.

gavinray 1 hour ago | parent

  > "... for the harnesses we have seen in these campaigns, average success rate is hovering around 10%"
A 10% success rate is absurd.

_neil 39 minutes ago | parent

Cairn is one of those names that comes up regularly if you ask an LLM to generate project names. Similar to Loom.

https://github.com/search?q=cairn+in%3Aname+created%3A%3E202...