
- Sitecore patched a critical zero-day deserialization flaw affecting legacy deployments
- Threat actors exploited the vulnerability to deploy malware like WeepSteel
- Mandiant intervened mid-attack, preventing full damage
Popular CMS platform Sitecore has patched a critical zero-day vulnerability found to be being abused in cyberattacks.