DuckDuckGo — Cyber Attacks, Breaches & Threat Activity

Related Threat Clusters

• Ghost CMS SQL Injection Exploits 700+ Sites in Ongoing ClickFix Campaign

  A critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS is being actively exploited in a large-scale cyberattack affecting over 700 websites, including those of Harvard University, Oxford University, Auburn…

  17 articles · Updated May 25, 2026

Recent Intelligence Reports

• Critical Ghost CMS Vulnerability Exploited to Hack 700+ Websites — Thecyberexpress · May 26, 2026
• Ghost CMS SQL Injection Hits 700 Sites: Harvard, DuckDuckGo Serve Fake Cloudflare Malware — Techtimes · May 25, 2026
• Ghost CMS SQL Injection Vulnerability Facilitates Large — Technadu · May 25, 2026
• Ghost CMS SQL injection flaw exploited in large — Bleepingcomputer · May 24, 2026

Related Entities