Active Exploitation of Magento Zero-Day and Chromium Backdoors

A sophisticated backdoor toolkit named PEEP has been discovered, exploiting browser extensions in Chrome and Edge for command execution post-compromise. Additionally, a zero-day vulnerability in Magento and Adobe Commerce, known as StyleSmuggler, is being actively exploited, allowing attackers to deploy persistent Linux backdoors on e-commerce platforms. The BigBear 2.0 phishing-as-a-service platform has compromised 258 organizations by bypassing multi-factor authentication and stealing over 5,000 Microsoft 365 credentials. Recent arrests of two members of TeamPCP mark a significant law enforcement action against ongoing supply-chain attacks. The Google Chromium V8 type confusion vulnerability (CVE-2026-85046) is also under active exploitation. Organizations are urged to audit browser extensions, implement WAF rules, and monitor logs for suspicious activity.

Key Points: • PEEP backdoor exploits Chrome and Edge extensions for command execution. • Magento zero-day vulnerability allows unauthorized remote code execution. • BigBear 2.0 phishing platform has compromised 258 organizations.