Holiday 2026 Threat Briefing

Your holiday security review may confirm which scripts are approved. It may not show what those scripts do after they execute. 

Source Defense research from Q2 2026 documented eSkimming attacks that used trusted tag managers, analytics services, payment workflows, and other familiar browser infrastructure to deliver malicious code or move stolen data.

Some attacks activated only after particular shopper actions, payment choices, or session conditions, making them difficult to reproduce during routine testing. 

 Join Source Defense for a live threat briefing that translates current research into a practical browser-side review for retail security, AppSec, PCI, and eCommerce teams. 

What You'll Learn:

• How trusted services can carry unauthorized script behavior

• Why conditional execution can keep attacks out of routine scans and test sessions
• How fake forms and page manipulation can affect hosted payment flows
• Which behaviors to review across checkout, account, and billing journeys
• How runtime evidence can support PCI DSS 4.0.1 requirements 6.4.3 and 11.6.1

An approved script can still access sensitive fields, change page content, or communicate with an unauthorized destination. Understanding that runtime behavior helps teams identify gaps that script inventories and source-based reviews can miss.

You will leave with five practical questions your team can apply across sensitive customer journeys before peak-season change windows narrow.