Security News Craft CMS RCE exploit chain used in zero-day attacks to steal data BleepingComputer Daniel Bender Apr 25, 2025 Two vulnerabilities impacting Craft CMS were chained together in zero-day attacks to breach servers and steal data, with exploitation ongoing, according to CERT Orange Cyberdefense.