#ghost

New Ghost Phishing Wave Is Breaking Traditional Email Security

Jul 8, 2026 // 17:02

A recent EvilTokens campaign targeting businesses across the US and Europe is exposing a new email security blind spot. This “ghost phishing” technique keeps the […]

Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix Attacks

May 25, 2026 // 19:10

Threat actors are exploiting a recently disclosed critical security flaw in Ghost CMS to inject malicious JavaScript code with an aim to fuel ClickFix attacks. […]

Ghost CMS SQL injection flaw exploited in large-scale ClickFix campaign

May 24, 2026 // 18:57

A large-scale campaign is exploiting a critical SQL injection vulnerability (CVE-2026-26980) in Ghost CMS to inject malicious JavaScript code that triggers ClickFix attack flows. The […]

Ghost attack leverages seven npm packages. Wallets and credentials targeted for crypto theft.

Mar 24, 2026 // 15:03

Security specialists have discovered new harmful npm packages created to pilfer cryptocurrency wallets and private information. ReversingLabs is calling this the Ghost operation. The packages […]