The digital threatscape is evolving and a major change is taking place right now.
eCommerce Security
Hi Sahujime ,
We run a threat intelligence service called ThreatView that scans the global eCommerce web for digital skimmers - the bits of malicious JavaScript that quietly steal card details at checkout. Every few months we share what we're seeing, in case it's useful for the ecosystem. No pitch, just the picture.
Here's what changed between March and June 2026:
Adobe/Commerce (Magento 2) is still the most-targeted platform - however, the margin is narrowing.
Shopify has moved up to #2. That's the biggest shift in the dataset, and worth flagging if you run a Shopify storefront.
WordPress (incl. WooCommerce) and PrestaShop are close behind - both still very much in scope.
Magento 1 rounds out the top five.
The simple takeaway: no platform is "safe by default." Skimmer crews follow the largest opportunities - and the evolution is very dynamic.
What we've found is the key differentiator in a website's security is HOW well managed it is. Proactively managed = typically more secure and harder to break in.
Three things worth doing this month - regardless of which platform you run:
Audit your third-party scripts on checkout pages. Malicious skimmers target your customer payment data in the checkout process. Check your scripts.
Review who has write access to your website. A surprising share of incidents start with a compromised admin or developer account.
Make sure someone owns "checkout page integrity" - this is the critical attack point. Monitor it like a hawk!