security
How our Ghost blog got hit by CVE-2026-26980 + CVE-2026-29053 (and the backdoor that survived a full rebuild)
A real, remediated Ghost CMS compromise via CVE-2026-26980 + CVE-2026-29053 — including a database-level backdoor that survived a full server rebuild, and the session-secret issue that let it happen again two days later.