Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

Hackers are exploiting a vulnerability in the Gravity SMTP WordPress plugin to extract configuration data, including API keys ...

Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

Gravity SMTP WordPress vulnerability CVE-2026-4020 has drawn 17 million automated exploit attempts since May 2026, draining ...

A new report out today from Imperva Inc., a Thales company, is warning that vulnerable application programming interface and bot attacks are costing businesses up to $186 billion annually as incidents ...

Google identified the first zero-day exploit it believes was developed with AI and thwarted a planned mass exploitation event. The GTIG report documents state-sponsored actors from China, North Korea, ...

Crypto exchange SwissBorg said about 192,600 SOL ($41.5 million) was stolen from an external wallet used exclusively for its SOL Earn strategy on Monday. The exploit stemmed from a partner's ...

APIs (Application Programming Interfaces) have become the backbone of modern software ecosystems. They enable seamless communication between applications, services, and systems, driving innovation and ...

Salt Security, a leading API security company, is announcing a new collaboration with CrowdStrike that focuses on protecting APIs from evolving attacks while addressing the need for integrated ...