E-Commerce Security

E-commerce security encompasses the technical and procedural safeguards that protect online transactions, customer data, and digital payment systems from fraud and unauthorized access. For enterprises deploying AI in retail and marketplace contexts, this area matters because AI systems handling payment processing, customer authentication, and transaction monitoring must comply with PCI DSS standards and similar regulatory frameworks. Governance teams must ensure that machine learning models used for fraud detection or personalization don't inadvertently expose sensitive customer information or create new attack vectors through model extraction or adversarial manipulation.

1 item

ResearchGlobal2026-09-23

AI Agents Stole 600K Cards at $25 Per Target, Rewriting the E-Commerce Threat Model

A threat actor used three open-source AI agent frameworks, named Strix, Cairn, and Hermes, to autonomously compromise at least 119 online retail sites and steal over 600,000 payment card records. The operation ran at roughly $25 per target, demonstrating that agentic AI has industrialized payment skimming at scale. The attacker's cleanup routine also caused secondary data loss at victim organizations, compounding forensic and operational harm.

agentic AI AI-enabled attacks payment data breach PCI DSS open-source AI e-commerce security supply chain risk