Critical BlockStrap flaw lets hackers run code on Magento servers

Security news digest covering critical and actively exploited vulnerabilities, malware and spyware campaigns, data breaches, cyberattacks affecting government services, supply-chain malware, proxyjacking, cloud and endpoint security issues, and notable security updates. The most urgent items include an actively exploited BeyondTrust Remote Support zero-day, exploitation of a Collabora Online RCE flaw to backdoor Nextcloud servers, a critical Magento/Adobe Commerce BlockStrap PHP code-execution vulnerability, and zero-click delivery of Candiru spyware through malicious advertisements.