Defendwork Active Exploitation of Magento Zero-Day and Chromium Backdoors
Article Content
- •PEEP backdoor exploits Chrome and Edge extensions for command execution.
- •Magento zero-day vulnerability allows unauthorized remote code execution.
- •BigBear 2.0 phishing platform has compromised 258 organizations.
A sophisticated backdoor toolkit named PEEP has been discovered, exploiting browser extensions in Chrome and Edge for command execution post-compromise. Additionally, a zero-day vulnerability in Magento and Adobe Commerce, known as StyleSmuggler, is being actively exploited, allowing attackers to deploy persistent Linux backdoors on e-commerce platforms. The BigBear 2.0 phishing-as-a-service platform has compromised 258 organizations by bypassing multi-factor authentication and stealing over 5,000 Microsoft 365 credentials. Recent arrests of two members of TeamPCP mark a significant law enforcement action against ongoing supply-chain attacks. The Google Chromium V8 type confusion vulnerability (CVE-2026-85046) is also under active exploitation. Organizations are urged to audit browser extensions, implement WAF rules, and monitor logs for suspicious activity.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (3)
Following this threat?
Track PEEP, Adobe and CVE-2026-85046 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Continue Reading
Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…