Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that's installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS ...

Threat actors are exploiting an unauthenticated information disclosure vulnerability in the WordPress plugin Gravity SMTP, active on 100,000 sites. The flaw is tracked as CVE-2026-4020 and received a ...

Researchers at Paradigm Shift have published the technical details of usbliter8, a new unpatchable iPhone BootROM vulnerability that enables arbitrary code execution on devices powered by Apple’s A12 ...

If you’re still toting a 2018 or 2019 iPhone model, we have some potentially bad news: security researchers have just discovered an “unpatchable” security vulnerability for two major Apple silicon ...

Apple has quietly released a wave of wireless audio updates, deploying critical software patches to its flagship AirPods and Beats devices to safeguard user data and optimize performance. The most ...

Threat actors are targeting vulnerabilities in Joomla and the LiteSpeed cPanel plugin for code execution and privilege escalation. Affecting the Joomla Content Editor (JCE) for Joomla and tracked as ...

Forza Horizon 6 players who discovered they could drive a GMC Hummer EV into a glitch and walk away with 999,999,999 credits learned on June 15 that the party was over. The exploit, which involved ...

Last Tuesday, Microsoft patched a vulnerability it rated as max critical in its M365 Copilot AI platform. On Monday, the researchers who discovered the vulnerability and reported it to Microsoft ...

MEDINA, Ohio -- The Fourth of July is always a time of celebration in Medina, with a city parade and a community fireworks display, but as the nation’s 250 th birthday nears, Friends of the Cemetery ...

The Aztec Connect platform was deprecated in March 2023, but the immutable smart contract still held over $2 million in crypto assets. Aztec Connect, a deprecated decentralized finance platform, was ...

One of the world’s most active ransomware groups exploited a critical vulnerability in Oracle’s PeopleSoft software suite and used it to target about 100 customers and extort at least one of them to ...