Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

The tech industry is learning that AI autonomy can be a double-edged sword. AI agents move from advisory roles to executing ...

Can you prevent every breach? No, probably not. When something breaks in, can you keep it from spreading? That's the core ...

Shine a lightYour attack surface is not what your inventory says it is. It is everything your inventory missed. By Tiana Cline, ContributorJohannesburg, 18 Jun 2026One of the things you’ll hear ...

Security researchers identified a coordinated malware campaign within the JetBrains Marketplace designed to exfiltrate ...

Azul, the trusted leader in enterprise Java for today’s AI and cloud-first world, today launched a free JVM vulnerability ...

CVE-2026-20253 is a CVSS 9.8 pre-auth flaw in Splunk Enterprise's PostgreSQL sidecar service. An unauthenticated attacker can ...

Adversaries operate on a short timeline that renders traditional defense cycles obsolete. The CrowdStrike 2025 Global Threat ...

Attackers are exploiting three Fortinet FortiSandbox flaws, including one patched last week, risking auth bypass and command ...

Radware® (NASDAQ: RDWR), a global leader in application security and delivery solutions for multi-cloud environments, today announced AI Xploit Shield, a new service that provides organizations with ...

Cisco’s advisory renews attention on SD-WAN management systems that control how enterprises connect sites to cloud ...