55
60
60
60
55
60
55
60
60
60
Adobe fixes critical Magento zero-day exploited to backdoor servers
Adobe emergency-patches actively exploited max-severity Magento/Adobe Commerce zero-day CVE-2026-75650 (StyleSmuggler), used since Sept 4 to backdoor servers.
Adobe released an emergency hotfix (VULN-39341) for CVE-2026-75650, a max-severity zero-day dubbed StyleSmuggler affecting Adobe Commerce 2.4.4-2.4.9, Adobe Commerce B2B 1.3.3-1.5.3, and Magento Open Source 2.4.6-2.4.9, enabling arbitrary code execution. Sansec reports the flaw has been exploited since at least September 4 to plant a backdoor whose C2 host is disguised as an NTP server, leaving traces like 'Payment Transaction Failed Reminder' emails. A second attacker with unrelated tooling is exploiting the flaw to deploy a 485-byte PHP web shell that collects server details, checks pub/media writability, and exfiltrates data to an oast.site subdomain. Adobe recommends immediate hotpatching plus rotation of all secrets including admin passwords, API keys, database credentials, and SSH keys.
88
55
60
55
60
March 2019 Patch Tuesday: Microsoft patches two actively exploited Windows flaws
60
60
60
SessionReaper attacks have started, 3 in 5 stores still vulnerable
60
60
60
Week in review: F5 data breach, Microsoft patches three actively exploited zero-days
60
60
60
Microsoft Patches 67 Vulnerabilities Including WEBDAV Zero
60
60
60
60
Microsoft fixes zero-day exploited for cyber espionage (CVE-2025-33053)
60
60
July 2021 Patch Tuesday: Microsoft fixes 4 actively exploited bugs
60
60
Operation Triangulation: The last (hardware) mystery
60
August 2020 Patch Tuesday: Microsoft fixes two vulnerabilities under attack
60
60
55
55
60
60
Microsoft Warns of Two Actively Exploited Defender Vulnerabilities
60