Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

The remote code execution flaw enables root access and voice attacks on HP Poly VoIP phones, including eavesdropping and the ability to collect audio to generate deepfakes. HP has released patches for ...

The zero-day "nightmare" apparently isn't over for Microsoft, as a disgruntled researcher who's been feuding with the company for the past three months has dropped yet another proof-of-concept (PoC) ...

Google is warning of a cyber espionage campaign linked to a China-nexus threat actor, UNC6508, that kept close tabs on valuable US and Canadian research environments for over a year. The campaign ...

Gravity SMTP WordPress vulnerability CVE-2026-4020 has drawn 17 million automated exploit attempts since May 2026, draining ...

A week after the Sadiku-led Boko Haram faction killed and abducted more than 170 women and children from Woro in Kaiama, Kwara State, the terror group released a ...

PROVIDENCE — A former teacher and athletics coach at a private Christian school in Barrington is accused of giving a 14-year-old student lingerie and alcohol, and requesting explicit photos of her ...

The billionaire philanthropist testified on Wednesday in a closed-door congressional hearing about the Justice Department’s investigation of Jeffrey Epstein. By Matthew Goldstein Bill Gates, the ...

The message was not merely propaganda. It reflected a growing global challenge in which extremist groups exploit digital platforms and weaknesses in digital governance systems to communicate, spread ...

Some AI cybersecurity threats are incredibly simple. They’re still dangerous. On June 5, 404 Media reported that attackers had been using Meta’s AI customer support agent to steal Instagram accounts.