Tens of Thousands of E-Commerce Sites at Heightened Security Risk

Report delivered at Payment Card Industry Security Standards Council meeting flags issues in deployments of Magento, a popular e-commerce platform.

Magento is a popular e-commerce platform, used by nearly 74,000 web sites in North America alone. And according to new research, 79% of them are at heightened risk from cyber criminals.

Book a demo today to see GlobalDots is action.

Optimize cloud costs, control spend, and automate for deeper insights and efficiency.

Book a demo today to see GlobalDots is action.

Researchers at Foregenix analyzed more than 170,000 Magento websites and found that 90% of those using Magento 1 are at this heightened risk, while roughly 30% of those with Magento 2 are at the elevated risk level.

The heightened risk comes from unpatched vulnerabilities, including 2.3% of all the Magento websites that have not yet patched for Magento Shoplift, a vulnerability that was disclosed (and a patch made available for) in January of 2015. Foregenix delivered the results of their research in October at the Payment Card Industry Security Standards Council European Community Meeting in London.

Graphic of locks and binary code representing cybersecurity themes.

Read more: Dark Reading

Latest Articles

Your AI Policy Won’t Stop This. Here’s What Does.

A step-by-step walkthrough of what AI governance looks like when it’s technically enforced, not written on paper. Your acceptable use policy says something like: “employees must not share sensitive company data with AI tools.” Someone signed it last quarter. Then they opened ChatGPT, typed a customer name and a contract value into a prompt, and […]

Ganesh The Awesome
5th August, 2026
Who Controls What Your Team Shares with AI? | Cloudflare Zero Trust Webinar

Your employees are using AI tools. You probably don’t know which ones, or what they’re sending.In this session, Ganesh The Awesome walks through how to close that gap in 30 minutes using Cloudflare Zero Trust and Cloudflare AI Gateway. Want to go deeper? We’re happy to run a 1-on-1 session tailored to your environment.

Ganesh The Awesome
29th July, 2026
In 2026, Most CDN Teams Still Find Out About Outages From Customers First

This post is based on a live panel webinar co-hosted by GlobalDots, Hydrolix, and AWS, where engineers and go-to-market leaders across CDN, edge, and agentic AI operations discussed what actually happens when delivery infrastructure breaks. Just five people on the call talking about where visibility fails today, and what changes once agents start watching the […]

Eduardo Rocha
15th July, 2026
From Alert to Action: A CDN & Edge Practitioners Summit

Most teams still learn about a CDN problem from a customer rather than from their own monitoring stack.In this panel, GlobalDots, Hydrolix, and AWS break down why that keeps happening and what it takes to fix it: full-fidelity data instead of sampled logs, and AI agents that can actually act on it. Full Webinar: Demo […]

Eduardo Rocha
15th July, 2026

Unlock Your Cloud Potential

Schedule a call with our experts. Discover new technology and get recommendations to improve your performance.

    GlobalDots' industry expertise proactively addressed structural inefficiencies that would have otherwise hindered our success. Their laser focus is why I would recommend them as a partner to other companies

    Marco Kaiser
    Marco Kaiser

    CTO

    Legal Services

    GlobalDots has helped us to scale up our innovative capabilities, and in significantly improving our service provided to our clients

    Antonio Ostuni
    Antonio Ostuni

    CIO

    IT Services

    It's common for 3rd parties to work with a limited number of vendors - GlobalDots and its multi-vendor approach is different. Thanks to GlobalDots vendors umbrella, the hybrid-cloud migration was exceedingly smooth

    Motti Shpirer
    Motti Shpirer

    VP of Infrastructure & Technology

    Advertising Services

    GlobalDots guided our migration to Cloudflare, implemented SSL for SaaS, eliminated certificate maintenance, and remained highly responsive throughout.

    Chris Cutajar
    Chris Cutajar

    Infrastructure Eng. & Security Manager