Ghost CMS Under Siege: How a SQL Injection Turned 700+ Blogs Into Malware Distribution Networks

A critical SQL injection in Ghost CMS turned 700+ sites into malware launchers. Harvard, Oxford, DuckDuckGo compromised. Here's what happened and what to do ...
Example of fake Cloudflare verification

700+ education and tech websites hijacked in huge ClickFix malware campaign

Hackers are abusing a Ghost CMS website flaw to serve fake Cloudflare verification pages that pressure users into infecting their own PCs ...
CVE-2026-42208: LiteLLM

CVE-2026-42208: Pre-Authentication SQL Injection in LiteLLM Exposes API Credentials

LiteLLM's unauthenticated SQL injection flaw leaks API credentials across providers. Explore CVE-2026-42208 impact, fixes, and AppTrana WAAP coverage. The post CVE-2026-42208: <em>Pre-Authentication SQL Injection in LiteLLM</em> Exposes API Credentials appeared first on ...
Footer-for-Blogs-3

SQL Injection

SQL Injection (SQLi) remains one of the most persistent and dangerous web application vulnerabilities. Attackers who successfully exploit SQLi can read, modify, or delete sensitive data, bypass authentication, escalate privileges, and in ...
2M+ Application Attacks Blocked in Real Time | July ADR Report | Contrast Security

2M+ Application Attacks Blocked in Real Time | July ADR Report | Contrast Security

July’s Application Detection and Response data revealed two standout events: a concentrated malicious campaign using multiple attack types against one organization, and an unprecedented spike that hit another organization with more than ...
Application Layer Attack Investigations in Minutes | Sumo Logic and Contrast Security

Application Layer Attack Investigations in Minutes | Sumo Logic and Contrast Security

For a security analyst, the day begins and ends in the Sumo Logic Cloud SIEM. It’s the central hub for unifying security and observability data, designed to turn a firehose of enterprise-wide ...
How ADR Sees the Attacks that Other Cybersecurity Tools Miss | Application-Layer Security | Contrast Security

How ADR Sees the Attacks that Other Cybersecurity Tools Miss | Application-Layer Security | Contrast Security

If your tools can’t see what’s happening inside your apps and application programming interfaces (APIs), they can’t stop breaches. And the truth is, perimeter and endpoint tools were never designed to detect ...
ADR Report | Application Detection and Response Trends | Contrast Labs

ADR Report | Application Detection and Response Trends | Contrast Labs

In a startling finding, Contrast Security Application Detection and Response stopped tens of thousands of attacks that made it past perimeter defenses on a single application in mid-January 2025.  ...
ADR Report | Application Detection and Response Trends | Contrast Labs

ADR Report | Application Detection and Response Trends | Contrast Labs

In a startling finding, Contrast Security Application Detection and Response stopped tens of thousands of attacks that made it past perimeter defenses on a single application in mid-January 2025.  ...