Critical Craft CMS Flaws Exploited in Wild: 300+ Servers Breached, Experts Warn

Cybersecurity experts are warning website owners after hackers began actively exploiting two critical vulnerabilities in Craft CMS, a content management system, leaving hundreds of servers compromised. The flaws — CVE-2024-58136 and CVE-2025-32432 — were discovered by Orange Cyberdefense’s SensePost team during a forensic investigation in mid-February. Their research revealed that attackers are using these bugs […]

The post Critical Craft CMS Flaws Exploited in Wild: 300+ Servers Breached, Experts Warn appeared first on eSecurity Planet.

April 28, 2025
Read More >>

Defensive Security Podcast Episode 297

 
Become a Patreon supporter of the show here: https://www.patreon.com/defensivesec

Links:

https://www.cybersecuritydive.com/news/ransomware-gangs–tactics-/739937/
https://www.bleepingcomputer.com/news/security/over-12-000-keriocont…

February 18, 2025
Read More >>

How Do Hackers Exploit Your Vulnerabilities?

At the time of writing, there are hundreds of thousands of publicly known vulnerabilities. These range from critical flaws that could cause irreparable damage if exploited to low-severity issues that might seem barely even worth bothering with. With vu…

January 9, 2025
Read More >>

How to Complete an IT Risk Assessment (2023)

In a perfect world, you’d have the resources to defend yourself against every possible cybersecurity threat and vulnerability. The reality, however, is that even the largest organizations have limited resources to dedicate to cybersecurity. An effectiv…

December 18, 2023
Read More >>