September 22, 2026
- BigCommerce notified multiple merchants of breaches after attackers compromised credentials for third-party Ribon applications and used that access to inject malicious scripts into storefronts. BleepingComputer · Supply Chain & Developer Targeting
in Delivery Through the Trust Layer: GPO, a Signed Driver, and Valid npm Provenance