Ghost CMS flaw abused to push ClickFix attacks on hundreds of sites

Multiple active and high-impact incidents: attackers are exploiting a patched Ghost CMS flaw (CVE-2026-26980) to push ClickFix malware across >700 unpatched sites (including universities), and a highly critical Drupal SQL injection (CVE-2026-9082, CVSS ~9.8) is under active attack and was added to CISA’s KEV. Other notable items include a 340M-record OnlyFans-linked dataset compiled from prior leaks (not a direct breach), a zero-click WhatsApp account takeover affecting iOS 16 users, Dutch authorities seizing ~800 servers tied to a hosting provider linked to cyberattacks/disinformation, the_k/