Technology

Sansec disclosed an actively exploited vulnerability, StyleSmuggler, affecting all current Magento and Adobe Commerce versions including Magento Open Source 2.4.9, with confirmed compromises beginning September 4, 2026. The exploit chain requires no authentication, installs a persistent backdoor via Magento's template rendering system, and succeeds even if the triggered email is never delivered. As of September 7, Adobe had published no patch, advisory, CVE identifier, or workaround; available mitigations are third-party emergency measures that block the known exploit chain but do not remove existing infections.

SonicWall has confirmed that two zero-day vulnerabilities in its SMA1000 appliances, a CVSS-10 server-side request forgery flaw and an OS command injection flaw, were actively exploited before public disclosure. CISA added both to its Known Exploited Vulnerabilities catalog on September 2 and set a September 5 remediation deadline for covered federal agencies, which has now passed. No public proof-of-concept, attacker attribution, or forensic confirmation of a chained exploit has been established, though SonicWall urges all affected customers to upgrade firmware and check for indicators of compromise.

MIT researchers have demonstrated printable living circuit boards built from five engineered bacterial cell types functioning as transistor-like switches, capable of performing operations including a full-adder, with results published in Nature Chemical Biology on 17 August 2026. Each calculation takes approximately eight hours, the circuits were tested on agar plates rather than inside living organisms, and scalability is constrained by a limited supply of usable transcription factors. The work extends a field dating to at least 2011 and has not yet been independently reproduced.