Australian Cyber Agency Warns of Global CMS Exploitation Campaign

The Australian Cyber Security Centre (ACSC) warns of a highly scaled, global campaign actively scanning and exploiting recent CMS vulnerabilities (2025–2026) — including WordPress, Craft CMS, MaxSite, MetInfo and Joomla JCE — to deploy webshells that enable RCE, credential theft, malware uploads and broader network compromise; the advisory provides detection, containment and remediation steps and notes the potential use of AI-powered tooling to accelerate exploitation.