Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

Beach Day API, a developer-first REST API powered by VersusMedia, today announced the launch of its real-time beach and ocean ...

Hackers are exploiting a vulnerability in the Gravity SMTP WordPress plugin to extract configuration data, including API keys ...

At least 15 malicious plugins found on the JetBrains Marketplace were designed to steal AI API keys from developers. The campaign, discovered by Aikido Security, includes plugins that act as AI coding ...

A 30-second demo loop is the easy part. Returning a structurally complete song — one with a defined intro, verses, choruses, a bridge, and a clean ending — is where AI music APIs are truly tested. For ...

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a ...

The platform delivers live TCGplayer and eBay prices, graded card values, and price history for 300,000+ cards through ...

Informativ, a provider of fraud prevention, compliance, credit reporting, and customer insights for automotive dealers, ...

Linx Security, the AI-native identity security and governance platform built for the era of hybrid workforce — humans, AI agents and non-human identities — today announced its integration with Claude ...

Here is what the agenda actually needs to look like. 1. Stop treating the core as a project. Treat it as an existential risk.

An agentic coding tool tasked with cloning and setting up a seemingly benign GitHub repository could execute a malicious ...