Alert: Hackers Actively Exploiting Critical Craft CMS Vulnerability, CISA Warns

CISA alerts about active exploitation of a critical security vulnerability (CVE-2025-23209) in Craft CMS versions 4 and 5, enabling remote code execution if system security keys are compromised. The agency mandates federal patches by March 13, 2025, and recommends immediate upgrades to ver...