With the body of forensic evidence tied to Magecart growing, researchers have released recommendations for defending against the group.

A RiskIQ researcher says targeting third-party web apps is the "supply chain attack for the web."

Ticketmaster says a chat app by Inbenta Technologies was the problem. But Inbenta claims Ticketmaster improperly deployed the app on its payment system.