Threat actors have exploited a zero-day vulnerability in Craft CMS to execute PHP code on hundreds of websites.

Threat actors exploited Craft CMS zero-days CVE-2025-32432 and CVE-2024-58136, compromising 300 of 13,000 vulnerable servers.

Showcase your company news with guaranteed exposure both in print and online Network with our region's hottest startups! Pittsburgh Inno presents the Startups to Watch event… The Future of Bay ...