Daily News, Sep, 08 - Magento zero day

Adobe Commerce and Magento users face immediate risk from StyleSmuggler, a new zero-day actively exploiting systems to deploy backdoors on Linux servers. Patch or isolate these e-commerce environments without delay. Two data breaches highlight supply chain vulnerabilities: Mathspace reported a breach impacting over a million users via their Metabase system, and an additional 67,000 Trezor customers were affected by a breach at shipping partner ShipMonk. It seems some organizations are learning the hard way about third-party risk. On the AI front, Microsoft's Project Perception and Google Cloud's Gemini/GitLab integration are advancing agentic security, offering new automation frameworks for security teams, though code quality remains a prerequisite for effective AI-driven development. Today's actions: audit e-commerce platforms for vulnerable Magento versions, review third-party vendor access and security postures, and evaluate agentic AI integration into workflows.