[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyw-Jwvm60hLVsOw_7AoPKzGIxzP9W5LjOSgCYwz1Bkc":3},{"article":4,"iocs":54,"watch_terms":55,"solutions":56,"lesson":143},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":31,"category":32,"article_tags":36},"6e58a49d-11b7-4bcd-9998-e87e261d626e","BigCommerce alerts merchants of data breach linked to Ribon apps","bigcommerce-alerts-merchants-of-data-breach-linked-to-ribon-apps-7a6663","Ecommerce platform BigCommerce has alerted multiple merchants to data breaches after attackers compromised credentials for third-party Ribon applications and used them to inject malicious scripts into online stores. [...]","Ecommerce platform BigCommerce has alerted merchants to a data breach resulting from compromised credentials for third-party Ribon applications. Attackers used these credentials to inject malicious scripts into online stores and access shopper data, including names, emails, phone numbers, and shipping addresses. BigCommerce confirmed the incident, removed the affected apps, and stated its own systems were not breached.","BigCommerce alerts merchants of data breach via compromised Ribon app credentials.","https:\u002F\u002Fwww.bleepingcomputer.com\u002Fnews\u002Fsecurity\u002Fbigcommerce-alerts-merchants-of-data-breach-linked-to-ribon-apps\u002F","https:\u002F\u002Fwww.bleepstatic.com\u002Fcontent\u002Fhl-images\u002F2021\u002F11\u002F25\u002FOnlineShopping.jpg","2026-09-21T21:18:49+00:00","2026-09-21T22:00:24.070505+00:00",7,[17,20,22,25,27,29],{"name":18,"type":19},"Ribon","product",{"name":21,"type":19},"Ribon 1.5",{"name":23,"type":24},"BigCommerce","vendor",{"name":26,"type":24},"Be A Part Of",{"name":28,"type":24},"Fastr",{"name":30,"type":19},"Master of Malt","2e06f76c-d5b9-4f54-9eef-4d3447b10730",{"id":31,"icon":33,"name":34,"slug":35},null,"Breaches","breaches",[37,42,44,49],{"category":38},{"id":39,"icon":33,"name":40,"slug":41},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":43},{"id":31,"icon":33,"name":34,"slug":35},{"category":45},{"id":46,"icon":33,"name":47,"slug":48},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":50},{"id":51,"icon":33,"name":52,"slug":53},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[23,26,28],{"controls":57,"vendors":142},[58,87,113],{"slug":59,"name":60,"problem":61,"products":62},"identity-governance","Identity governance and single sign-on","People who leave or change roles lose access everywhere at once, and forgotten accounts stop piling up.",[63,71,79],{"vendor_slug":64,"vendor_name":65,"vendor_logo":66,"product_slug":67,"product_name":68,"url":69,"description":70},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","entra-id","Microsoft Entra ID","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fidentity-access\u002Fmicrosoft-entra-id","Cloud identity and access management with single sign-on, conditional access, passkeys and identity governance.",{"vendor_slug":72,"vendor_name":73,"vendor_logo":74,"product_slug":75,"product_name":76,"url":77,"description":78},"okta","Okta","\u002Fvendor-logos\u002Fokta.png","workforce-identity","Okta Workforce Identity","https:\u002F\u002Fwww.okta.com\u002Fproducts\u002Fworkforce-identity\u002F","Single sign-on, adaptive MFA including phishing-resistant methods, and lifecycle management for employees.",{"vendor_slug":80,"vendor_name":81,"vendor_logo":82,"product_slug":83,"product_name":84,"url":85,"description":86},"omada","Omada","\u002Fvendor-logos\u002Fomada.png","omada-identity-cloud","Omada Identity Cloud","https:\u002F\u002Fomadaidentity.com\u002Fproducts\u002Fomada-identity-cloud\u002F","Identity governance and administration delivered as a service.",{"slug":88,"name":89,"problem":90,"products":91},"saas-security-posture","SaaS security posture management (SSPM)","Business apps like Microsoft 365 and Salesforce stop leaking through risky settings and connected apps.",[92,98,106],{"vendor_slug":93,"vendor_name":94,"vendor_logo":95,"product_slug":93,"product_name":94,"url":96,"description":97},"appomni","AppOmni","\u002Fvendor-logos\u002Fappomni.png","https:\u002F\u002Fappomni.com\u002F","SaaS security posture management for platforms such as Salesforce, Microsoft 365 and ServiceNow.",{"vendor_slug":99,"vendor_name":100,"vendor_logo":101,"product_slug":102,"product_name":103,"url":104,"description":105},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-shield","Falcon Shield","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Ffalcon-shield\u002F","SaaS security posture management, from CrowdStrike's acquisition of Adaptive Shield.",{"vendor_slug":107,"vendor_name":108,"vendor_logo":109,"product_slug":110,"product_name":108,"url":111,"description":112},"obsidian-security","Obsidian Security","\u002Fvendor-logos\u002Fobsidian-security.png","obsidian","https:\u002F\u002Fwww.obsidiansecurity.com\u002F","SaaS posture management and detection of account and integration compromise.",{"slug":114,"name":115,"problem":116,"products":117},"third-party-risk-management","Third-party risk management (TPRM)","You know which suppliers could hurt you, and you hear quickly when one of them is breached.",[118,126,134],{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"securityscorecard","SecurityScorecard","\u002Fvendor-logos\u002Fsecurityscorecard.png","security-ratings","SecurityScorecard Ratings","https:\u002F\u002Fsecurityscorecard.com\u002Fsolutions\u002Fuse-cases\u002Fsecurity-ratings\u002F","Outside-in security ratings and monitoring of suppliers.",{"vendor_slug":127,"vendor_name":128,"vendor_logo":129,"product_slug":130,"product_name":131,"url":132,"description":133},"onetrust","OneTrust","\u002Fvendor-logos\u002Fonetrust.png","third-party-management","OneTrust Third-Party Management","https:\u002F\u002Fwww.onetrust.com\u002Fsolutions\u002Fthird-party-management\u002F","Supplier inventory, risk assessments and monitoring across privacy and security.",{"vendor_slug":135,"vendor_name":136,"vendor_logo":137,"product_slug":138,"product_name":139,"url":140,"description":141},"upguard","UpGuard","\u002Fvendor-logos\u002Fupguard.png","upguard-vendor-risk","UpGuard Vendor Risk","https:\u002F\u002Fwww.upguard.com\u002Fproduct\u002Fvendor-risk","Supplier security questionnaires, ratings and continuous monitoring.",[],{"slug":144,"title":145,"body":146,"framework_refs":147,"framework_notes":159},"third-party-app-credentials-compromised-in-bigcommerce-merchant-data-breach","Third-Party App Credentials Compromised in BigCommerce Merchant Data Breach","Attackers exploited compromised credentials belonging to third-party Ribon applications integrated with BigCommerce, using them to inject malicious scripts directly into merchant storefronts. This is a classic supply chain attack where the security posture of a trusted vendor becomes the weakest link — BigCommerce's own infrastructure remained intact, yet thousands of shoppers' personal data was still exposed. It underscores that any third-party integration carries inherited risk and must be subject to the same scrutiny as internal systems. Organizations that grant third-party apps broad access without ongoing credential hygiene and behavioral monitoring create invisible attack surfaces that are difficult to detect until damage is done.",[148,149,150,151,152,153,154,155,156,157,158],"CIS Control 2: Inventory and Control of Software Assets","CIS Control 5: Account Management","CIS Control 15: Service Provider Management","NIST SP 800-161: Supply Chain Risk Management","NIST AC-2: Account Management","NIST AC-6: Least Privilege","NIST SR-3: Supply Chain Controls and Plans","GDPR Article 32: Security of Processing","GDPR Article 28: Processor Obligations","NIST CSF DE.CM-7: Monitoring for Unauthorized Activity","ISO 27001 A.15.1: Information Security in Supplier Relationships",{}]