{"uuid": "7ceadcb1-ae04-4ca8-be8f-8efcc6b782e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-26980", "type": "seen", "source": "https://t.me/CyberDispatch/1706", "content": "Hackers breached 700+ Ghost CMS websites to serve ClickFix malware attacks.\n\nThe attackers exploited critical flaw CVE-2026-26980 to steal admin API keys and inject malicious JavaScript into legitimate sites, including university, AI, blockchain, and fintech platforms.\n\nVisitors were shown fake CAPTCHA pages that tricked them into running malware.", "creation_timestamp": "2026-08-29T20:00:15.050529Z"}