Attackers are actively exploiting a critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) to inject malicious JavaScript that delivers ClickFix social engineering attacks at scale. If you run Ghost CMS, you should immediately patch to the lat
Read the full article: https://www.bleepingcomputer.com/news/security/ghost-cms-sql-injection-flaw-exploited-in-large-scale-clickfix-campaign/