Frequency
5
occurrences
First Seen
April 20, 2026
Last Seen
May 25, 2026
Related Threat Clusters
-
Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign
A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn…
17 articles · Updated May 25, 2026 -
Hazy Hawk Campaign Hijacks Subdomains at 34 US Universities
In early April 2026, a coordinated subdomain takeover campaign was discovered, affecting 34 major US universities, including MIT, Harvard, and Stanford. The attackers, identified as Hazy Hawk, exploited abandoned CNAME…
2 articles · Updated April 20, 2026
Recent Intelligence Reports
- Ghost CMS SQL Injection Hits 700 Sites: Harvard, DuckDuckGo Serve Fake Cloudflare Malware — Techtimes · May 25, 2026
- Ghost CMS SQL Injection Vulnerability Facilitates Large — Technadu · May 25, 2026
- Ghost CMS SQL injection flaw exploited in large — Bleepingcomputer · May 24, 2026
- Hazy Hawk Hijacked Subdomains Mit Harvard Stanford Us Universities — www.sh.consulting · April 20, 2026
- Threat actor hijacked subdomains at 30+ major universities, researcher found — Edscoop · April 20, 2026