Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys Source: The Hacker News Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers Read original
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys Source: The Hacker News Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers Read original
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys Source: The Hacker News Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers Read original
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys Source: The Hacker News Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers Read original
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday Source: BleepingComputer CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is being exploited in attacks. […] Read original
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday Source: BleepingComputer CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is being exploited in attacks. […] Read original
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday Source: BleepingComputer CISA has urged U.S. federal agencies to secure their systems by Sunday against a critical Splunk Enterprise vulnerability that is being exploited in attacks. […] Read original
Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone Source: The Hacker News Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, tracked as CVE-2025-20701 (CVSS score: 8.8), refers to a case of incorrect authorization impacting the Airoha Bluetooth Read original
Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone Source: The Hacker News Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, tracked as CVE-2025-20701 (CVSS score: 8.8), refers to a case of incorrect authorization impacting the Airoha Bluetooth Read original
Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone Source: The Hacker News Apple has updated its Beats Studio Buds wireless earbuds to patch a high-severity vulnerability that could be exploited by nearby hackers to eavesdrop on users. The vulnerability, tracked as CVE-2025-20701 (CVSS score: 8.8), refers to a case of incorrect authorization impacting the Airoha Bluetooth Read original