A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The campaign was ...

Drupal is warning that hackers are attempting to exploit a "highly critical" SQL injection vulnerability announced earlier this week. The content management system (CMS) project published a PSA on May ...

AI systems inherit decades-old security flaws many organizations still fail to address consistently.

Fortinet’s FortiClient endpoint management software, meant to harden corporate and government machines, instead exposed them ...