CSP Integrity

Magecart

The Fake Stripe Card Form Skimming Online Shops

We’ve been tracking a Magecart skimming kit that steals card details by replacing a shop’s payment option with a fake form styled to look like Stripe’s. Pick a payment option at checkout and, on an infected shop, the box under it is quietly replaced with a new

JavaScript Integrity Monitoring

We can prove exactly what JavaScript ran in your users’ browsers

Right now, on our own production site, I can tell you the cryptographic fingerprint of every single JavaScript file that executed in a real visitor's browser this month. Not what our build system produced. Not what our CDN thinks it's serving. What actually ran, in the