Critical BlockStrap flaw lets hackers run code on Magento servers

Security news roundup covering critical vulnerabilities with active exploitation risk, spyware delivered through zero-click targeted advertising, major data breaches, supply-chain malware, proxyjacking, cloud collaboration server compromises, and security update or support lifecycle issues. Notable items include critical Magento/Adobe Commerce and Nextcloud Collabora RCE flaws, a BeyondTrust Remote Support zero-day exploited since August, Candiru spyware targeting Al Jazeera devices, and an 11.18 million-record Burger King Japan breach.