Mimo Hackers Exploit CVE-2025-324

A financially motivated threat actor has been observed exploiting a recently disclosed remote code execution flaw. The vulnerability in question is CVE-2025-32432, a maximum severity flaw in Craft CMS that was patched in.