June 2026

Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys 2026-06-20 at 12:56 By Threat actors are exploiting a recently patched security flaw impacting Gravity SMTP, a WordPress plugin that’s installed on about 100,000 sites. The vulnerability, tracked as CVE-2026-4020 (CVSS score: 5.3), is a medium-severity information disclosure flaw that can allow unauthenticated attackers […]

Unpatchable ‘usbliter8’ Exploit Breaks Apple A12 and A13 SecureROM Boot Chain 2026-06-19 at 21:37 By Security researchers at Paradigm Shift have published a working exploit, dubbed usbliter8, that achieves arbitrary code execution inside the SecureROM of Apple’s A12 and A13 chips. That code is burned into the silicon at manufacture. No software update can reach it. Affected devices

The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes 2026-06-19 at 21:33 By The Gentlemen ransomware-as-a-service (RaaS) operation is actively developing and maintaining a suite of endpoint detection and response (EDR) killers that it hands out to affiliates for impairing system defenses before deploying the encryptor. This mature portfolio of EDR-terminating tools is

AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution 2026-06-19 at 20:38 By Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker’s web page, and that page’s JavaScript can reach a

World’s first AI museum is vibrant sensory overload — but is it really ‘art’? 2026-06-19 at 20:37 By Linda Laban It interacts with visitors via a wearable sensory wrist device that captures body heat, heart rate and more. This article is an excerpt from Latest Technology News | New York Post View Original Source

Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites 2026-06-19 at 18:07 By Dutch law enforcement authorities, along with counterparts from Canada , Germany, and the U.S., have disrupted malicious infrastructure associated with SocGholish and cleaned up nearly 15,000 infected WordPress websites. “With these actions we deprive cybercriminals of access to infected computer systems,” Maikel

CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices 2026-06-19 at 17:00 By The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate appliances to take steps to secure against ongoing malicious activity aimed at thousands of internet-accessible devices. The sweeping campaign, believed to be the work of Russian-speaking