> the zero-day vulnerability has allowed the group to break out of the iframes and display malicious code to visitors and perform redirects That is of course s

> the zero-day vulnerability has allowed the group to break out of the iframes and display malicious code to visitors and perform redirects That is of course something that shouldn't happen, but it's not a particularly severe threat.