Attackers are exploiting CVE-2026-4020 in Gravity SMTP to leak API keys, OAuth tokens, and system data from WordPress sites.

Wordfence has blocked 17M+ exploit attempts targeting a Gravity SMTP bug that leaks API keys, OAuth tokens, and full system reports without authentication.

Researchers found 15 malicious JetBrains plugins posing as AI coding tools that exfiltrate OpenAI, DeepSeek, and SiliconFlow ...

If your SMB is adopting Claude, roll out features gradually and protect your API keys, because you cannot outsource your ...

At least 15 plug-ins for JetBrains IDEs transmit API keys to an external server, while otherwise offering their promised ...

SearchLeak and a three-CVE LiteLLM chain broke the same AI trust boundary in two weeks. A 5-check audit maps each gap to a ...

A researcher claims an AI-assisted pipeline helped earn $500,000 in Google bug bounty payouts, raising API security and ...

Linx Security, the AI-native identity security and governance platform built for the era of hybrid workforce — humans, AI ...

Abhinav: The technology is advancing quickly. One important development is the adoption of the Model Context Protocol (MCP) ...

Perfect Corp. (NYSE: PERF), the global leader in AI and augmented reality (AR) beauty technology, today announced the ...

Every enterprise security team is fighting a workforce problem they cannot see on any org chart. Bots, service accounts, API ...

M3 demonstrates that the next phase of agent development will not just be driven by larger datasets, but by efficient ...