⚠️ A new Magento skimmer uses WebRTC data channels instead of HTTP to steal payment data.

It pulls payloads and exfiltrates card details over encrypted UDP, bypassing CSP and staying invisible to most monitoring tools.

Attacks are exploiting the PolyShell RCE flaw at scale.

�� Read → https://thehackernews.com/2026/03/webrtc-skimmer-bypasses-csp-to-steal.html