Ninja Forms and Simple File List: Hackers Scan CMS Websites Globally to Deploy Webshells and Steal Credentials

Over 700 education and tech websites hijacked in ClickFix malware campaign exploiting Ghost CMS flaw

Attackers are exploiting a critical vulnerability in Ghost Content Management System (CMS) to hijack over 700 legitimate websites, including

Phishing Campaign Leveraging the NPM Ecosystem

Phantom Stealer malware targets banks via fileless phishing campaign

A threat actor is targeting banks and high-value organizations through a phishing campaign delivering Phantom Stealer, a credential and sess

Massive cyber espionage campaign compromises 75,000 Fortinet devices across 15 countries

A large-scale cyber espionage campaign has targeted Fortinet devices, compromising approximately 75,000 firewall and VPN systems across more

Critical cPanel vulnerability under active attack allows full server hijacking

Security researchers have discovered a critical vulnerability in cPanel and WebHost Manager (WHM), widely used web server management softwar

Early Exploitation of React2Shell Vulnerability (CVE-2025-55182) Targets Critical Infrastructure

The article details early exploitation activity following the public disclosure of the critical React2Shell vulnerability (CVE-2025-55182).