Malware5 min read
Ghost CMS Flaw Turns Harvard, Oxford Sites Into Malware Hosts
Attackers exploited CVE-2026-26980 SQL injection in Ghost CMS to compromise 700+ websites including Harvard and Oxford, deploying ClickFix social engineering malware through fake CAPTCHA prompts.
James RiveraJun 10, 2026
