Ghost Headlines

The DXP Scorecard

An in-depth review and scorecard of Ghost as a publishing platform, covering capabilities, cost efficiency, build simplicity, operational ease, and platform velocity.

Companies:Ghost

Security Boulevard

A detailed analysis of the Ghost CMS SQL injection vulnerability and its exploitation, turning over 700 blogs into malware distribution networks.

Companies:Ghost

DugganUSA

A cybersecurity firm's blog discussing the Ghost CMS mass exploitation and how they had detection rules early.

Companies:Ghost

TechRadar

A critical SQL injection vulnerability in Ghost CMS is being actively exploited to compromise over 700 websites, including universities, to deliver ClickFix malware.

Companies:Ghost

Yahoo Tech

A critical SQL injection vulnerability in Ghost CMS is being exploited in a large-scale ClickFix campaign, compromising over 700 domains.

Companies:Ghost

The Arabian Post

A critical SQL injection vulnerability in Ghost CMS (CVE-2026-26980) is being exploited to compromise over 700 websites and deliver ClickFix malware.

Companies:Ghost

TechTimes

A critical SQL injection flaw in Ghost CMS has been exploited to hijack over 700 sites, including Harvard and DuckDuckGo, to deliver fake Cloudflare prompts and malware.

Companies:Ghost

SecurityAffairs

Attackers are exploiting CVE-2026-26980 in Ghost CMS to hijack over 700 sites for ClickFix attacks, affecting high-profile domains.

Companies:Ghost

The Verge

The Verge reports that writers are leaving Substack for cheaper alternatives like Ghost and Beehiiv, highlighting Ghost's flat fee model and creator control.

Companies:Ghost

DropInBlog

The article is a comprehensive review of Ghost, evaluating its features, pricing, and suitability for different business models.

Companies:Ghost

Backstory & Strategy

Analysis of platform risks for creators, comparing Substack and Ghost's decoupled architecture, arguing Ghost offers more independence.

Companies:Ghost

36kr

Anthropic's Claude 5.0 AI discovered and exploited a blind SQL injection vulnerability in Ghost CMS, stealing an administrator's API key in 90 minutes.

Companies:Ghost

Ghost Blog

Ghost launched version 3.0 of its platform and announced it had raised $5 million in funding from its customers, highlighting a sustainable business model.

Companies:Ghost