Report URI

This account is verified. Learn more

@reporturi

Client-side security to control what code actually runs on your website.

Earth report-uri.com Joined April 2015

4 Following 3.8K Followers 641 Posts

Latest posts 5

Report URI @reporturi 4d

🚨 NEW RESEARCH: We've uncovered SuperPixel, a previously undocumented card skimmer infecting 100+ online shops so far.

It's hiding inside the shops' own trusted JavaScript files, replacing genuine payment forms and using Ethereum to locate its exfiltration endpoint.

blog.report-uri.com/superpixel-the…

blog.report-uri.com SuperPixel: The Card Skimmer Hiding Inside Your Own jQuery We've uncovered a new card-skimming campaign affecting more than 100 online shops so far, and the attackers are hiding their malware somewhere you might never think to look: inside the website's own...

Report URI @reporturi Oct 30

Polymarket lost ~$2.6M in a crypto theft involving a compromised third-party JavaScript file.

We investigated how the attack worked and how we could have detected and even stopped it.

blog.report-uri.com/polymarkets-cs…

blog.report-uri.com Polymarket's CSP Allowed Every Part of the $2.6 Million Crypto Theft For about fifty minutes on Thursday afternoon, a performance monitoring script loaded on polymarket.com was compromised and started quietly emptying the accounts of anyone it targeted. It walked off...

Report URI @reporturi Oct 22

Forgotten website tags are being turned into spyware delivery routes.

Working with iVerify, we traced DeadTag: 660+ hijacked domains, thousands of sites, and traffic feeding the Coruna and DarkSword iPhone exploit kits.

The investigation: blog.report-uri.com/deadtag-how-fo…

Report URI @reporturi Oct 21

Two critical PHP vulnerabilities leaked ahead of the scheduled patch. We disabled session upload progress, blocked multipart requests at the edge, and confirmed Cloudflare’s new WAF mitigations were in place.

Our response to php2shell so far: blog.report-uri.com/responding-to-…

blog.report-uri.com Responding to php2shell, CVE-2026-109618 and CVE-2026-109619 Two critical PHP vulnerabilities, CVE-2026-109618 and CVE-2026-109619, leaked before PHP could ship a fix. Here's what's known, what isn't, and the three things we did to protect Report URI in the...

Report URI @reporturi Oct 16

Criminals posed as a children’s charity to hide a card skimmer.

The site looked like a non-profit, but it was serving malicious code that stole checkout data from WooCommerce shops.

Here’s how the operation worked: blog.report-uri.com/criminals-buil…

blog.report-uri.com Criminals Built a Fake Children's Charity to Hide a Card Skimmer If you spot an unfamiliar domain in your network traffic, you might open it in a browser and see what it is. Do that with chatshield.org and you land on a non-profit that protects children from...