Information security
fromThe Hacker News
1 day agoGhost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks
A critical Ghost CMS SQL injection flaw enables unauthenticated attackers to steal admin API keys and inject malicious JavaScript for ClickFix poisoning.