Hundreds of e-commerce sites have been compromised in a supply-chain attack that allowed malware to execute malicious code in visitors' browsers, potentially stealing sensitive payment information. The attack involved at least three software providers and may have affected up to 1,000 sites, with the malware remaining dormant for six years before activation. Security firm Sansec reported limited global remediation efforts for the affected customers, including a major multinational company.

Google has introduced the Agent Payments Protocol (AP2) to facilitate secure agent-led transactions in e-commerce, garnering support from over 60 organizations. AP2 uses cryptographically signed digital contracts called Mandates to ensure user authorization and accountability during transactions, addressing security concerns associated with AI agents handling payment details. The protocol supports various payment methods and is available for organizations to implement through Google's public GitHub repository.