Magento StyleSmuggler zero-day exploited to deploy Linux backdoor

A BleepingComputer security-news feed reports multiple active or emerging threats, including exploitation of a Magento/Adobe Commerce zero-day to deploy a Linux backdoor, MFA-bypassing Microsoft 365 phishing, router and remote-management platform exploitation, ClickFix campaigns delivered through more than 5,400 compromised sites, and active targeting of Citrix NetScaler vulnerability CVE-2026-19490. The feed also covers major data breaches affecting Mathspace, Trezor customers, and potentially 153 million driver's licenses, along with phishing evasion using invisible Unicode characters.