Cybercriminals are exploiting the SQL-injection vulnerability CVE-2026-26980 in Ghost CMS across over 700 websites to conduct ClickFix attacks, with Harvard, Oxford, and DuckDuckGo among the victims; a patch has existed since February but remains widely uninstalled.

Agentic AI transforms Network Detection and Response from noisy data firehoses into intelligent systems, enabling teams to discover threats faster, reduce false positives, and optimize incident response—raw data becomes a strategic resource.

The Lazarus Group uses RemotePE, a memory-resident remote access trojan, to target financial and cryptocurrency firms; the multi-stage malware leaves no traces on disk and employs evasion techniques to avoid detection.