OpenAI launches beta Business Hub profiles and agents in ChatGPT
Verified companies can publish profiles, launch a business agent, and see limited interaction metrics; in-chat checkout was retired in March.
Stories per day · 30 days
2 RSS
Relatedaccess-bypass3commerce-core3drupal3magecart3magento3openai3ai-agents2brazil2chatgpt2payment-cards2plausible2retail2adobe-commerce1amazon1brand-impersonation1business-profiles1card-skimming1channel-software1
29 stories, newest first · one card per story
Stories tagged #ecommerce
DoppelCart shopping-fraud network reaches about 261,700 domains
About 40 percent of sites observed before October 17 remain active, and some checkouts capture bank one-time codes.
Revolve says data breach affected 1.5 million people
Indiana records put the total at 1,515,073, including stored card numbers and expiration dates for some shoppers.
Attackers exploit critical Drupal Commerce Core flaw CVE-2026-118539
Missing checks on routes and entity fields affect Commerce Core through 2.41 and 3.3.13 and may cost vendors money.
1
Drupal Commerce Core access bypass reported exploited in the wild
Releases before 2.41 and 3.0.0 before 3.3.13 are affected; Drupal rates the issue highly critical.
1
Drupal Commerce Core access bypass exploited against online stores
Unauthenticated attackers can hit the flaw on more than 42,000 sites; fixed releases are 3.3.13 and 8.x-2.41.
1
Attackers hijack Convertr analytics script to skim checkout card data
Sansec says a Brazilian gang altered Convertr’s Plausible tracker; the skimmer was later removed and Plausible upgraded to a patched version.
Attackers infect 953 Magento stores with scanner-evading JavaScript
Sansec says the campaign, active since July 2025, has used five loader domains and the final payload is still unknown.
Magento skimmer campaign hits 953 stores across five domains
Sansec says deepveindrilling.com, registered October 6, was loaded by 83 mostly Magento stores from October 7.
1
Fanatics launches OpenAI-powered Shop the Look on sports stores
After tests on about 30,000 MLB products, the companies report 10% higher engagement than the prior experience.
Magecart skimmer hits Convertr checkouts through Plausible tracker
Sansec says the tracker was still serving the skimmer on October 26 and that card data plus CPF was posted to 1x0.is.
3
deepveindrilling.com Magento loader found on 83 stores
Sixty of those stores already carried an earlier loader, and a stored payload reruns after the domain is blocked.
Stripe says AI agent purchases via Link are growing, without totals
September Link transactions rose 38-fold and volume 20-fold from a small base, with about 200 agents now.
Websites are closing their doors to AI agents
Amazon, airlines, and banks are blocking AI shopping and booking agents from Meta, OpenAI, xAI, and others.
Unauthenticated SQL Injection In Channel Software WebAlliance eCommerce
Rapid7 disclosed critical unauthenticated SQL injection CVE-2026-108065 in Channel Software WebAlliance eCommerce.
2
VU#162329: Multiple vulnerabilities in Thelia 2.6.0 and 2.6.1
CERT/CC details multiple Thelia 2.6.0 and 2.6.1 flaws, including admin-reachable remote code execution.
TikTok rolls out an AI shopping assistant and one-click checkout
TikTok launched a conversational AI shopping assistant and one-click checkout in the For You feed.
2
MiniCorp: The Last Mile of the AI Agent Firm
MiniCorp simulates an AI-run e-commerce firm that generates longitudinal and counterfactual enterprise training data.
ChatGPT can now virtually try on clothes for you
OpenAI globally launched ChatGPT virtual clothing try-on and a favorites feature powered by Images 2.5.
Shopify debuts Canvas, a way to build online stores by chatting with AI
Shopify launched Canvas so merchants can build live stores by chatting with its Sidekick AI.
Google tests buying from Walmart-owned Flipkart through Gemini and AI Mode in India
Google is testing direct Flipkart checkout inside Gemini and AI Mode for a limited set of Indian shoppers.
Wayfair boosts catalog accuracy and support speed with OpenAI
Wayfair uses OpenAI models to automate support triage and enrich millions of catalog attributes.
AI-Powered Campaign Targets Hundreds of Online Retailers
A Chinese-speaking actor used autonomous AI agents to compromise online retailers and steal over 600,000 credit cards.
4
BigCommerce Data Stolen via Ribon Apps Hack
Attackers stole BigCommerce shopper data by abusing compromised Ribon application API credentials.
1