Sansec

Sansec is a Dutch cybersecurity company focused exclusively on e-commerce security, best known for its research into Magecart attacks, the class of web-skimming campaigns that steal payment card data from online checkout pages. The Firm maintains proprietary threat telemetry across global Magento and Shopify storefronts, and regularly publishes disclosure-grade vulnerability research coordinated with platform vendors and CISA.

In June 2026, Sansec was one of the two firms (alongside Imperva) that confirmed active exploitation of CVE-2026-45247 in the Mirasvit Cache Warmer extension for Magento 2 and Adobe Commerce, observing live attacks against gaming and business sites in the United States, the United Kingdom, France and Australia within the nine-day window between Adobe's 25 May patch and CISA's 3 June KEV listing. Sansec's telemetry formed part of the evidentiary basis for the federal mandate.

Sansec's significance in the broader cyber-threat landscape stems from the e-commerce sector's structural vulnerability: Magento's third-party extension ecosystem gives attackers a wide, poorly-audited attack surface that sits outside the core platform's security review. Sansec's longitudinal monitoring of this surface, which includes thousands of storefronts globally, means it typically detects exploitation campaigns before mainstream vulnerability disclosure, giving it recurring influence on CISA KEV timelines and coordinated vendor patch cycles.