
CybersecurityCriticalBreaking
Ghost CMS Flaw Hijacks Websites
A critical vulnerability in the Ghost CMS is being actively exploited to hijack over 700 websites. Attackers inject a fake Cloudflare verification page, tricking visitors into running a malicious Windows command. This social engineering tactic, dubbed "ClickFix," ultimately installs malware onto the user's system.
Malwarebytes Labs1 min read