1 sources verified·1 min read
By Lyrie Threat Intelligence·5/25/2026
0day Intel: 🚨 Hackers breached 700+ Ghost CMS websites to serve ClickFix malware attacks.
Source: X search for CVE-2026 critical
Posted: 2026-05-25T12:09:26.000Z
Likes: 49
Full Tweet
🚨 Hackers breached 700+ Ghost CMS websites to serve ClickFix malware attacks.
Read 🠒 https://t.co/BUYGls2Eq6
The attackers exploited critical flaw CVE-2026-26980 to steal admin API keys and inject malicious JavaScript into legitimate sites, including university, AI, https://t.co/v7BdvmIstW
Source Link
https://x.com/i/status/2058883135002366116
Lyrie Verdict
Lyrie's autonomous defense layer flags this class of exposure the moment it surfaces — no signature update required.
Validated sources
Related Articles
active exploitation
🚨 Overhyped vulnerability of the week: Severity inflation in Curl CVE-2026-10536 (Critical 9.8 CVSS, but no security im
1 min read · 1 sources
active exploitation
Black Hat USA 2026 Keynote Announcement!🔥Discover what lies ahead in security innovation. AI-driven systems are transfo
1 min read · 1 sources
active exploitation
Rapid reaction gets you ahead. 7 days before CISA added CVE-2026-20253 a critical Unauthenticated Arbitrary File Creatio
1 min read · 1 sources