Vulnerable WordPress plugin iterations leak API keys, secrets, tokens, server information, and other data.
The post Attackers Exploit Gravity SMTP Plugin Flaw to Harvest Valuable WordPress Data appeared first on SecurityWeek.
Source:: securityweek
Webinar Today: How Modern Breaches Bypass MFA and Evade Detection
| June 17th, 2026Attendees will learn how attackers evade conventional detection methods, why legacy MFA alone is no longer sufficient, and how organizations can strengthen their defenses.
The post Webinar Today: How Modern Breaches Bypass MFA and Evade Detection appeared first on SecurityWeek.
Source:: securityweek
Hackers Exploiting Cisco Unified CM Vulnerability
| June 24th, 2026Cisco noted that a PoC had been available for CVE-2026-20230 when it announced patches in early June.
The post Hackers Exploiting Cisco Unified CM Vulnerability appeared first on SecurityWeek.
Source:: securityweek
Can Thought Leadership Erode Leadership Credibility?
| June 24th, 2026BeyondTrust, LastPass Impacted by Klue-Salesforce Incident
| June 24th, 2026Over a dozen Klue customers have confirmed that hackers stole data from their Salesforce instances.
The post BeyondTrust, LastPass Impacted by Klue-Salesforce Incident appeared first on SecurityWeek.
Source:: securityweek
Cybersecurity Firms Impacted by Klue Supply Chain Attack
| June 19th, 2026The hackers exfiltrated data from Salesforce instances of Klue customers, such as Huntress and Recorded Future.
The post Cybersecurity Firms Impacted by Klue Supply Chain Attack appeared first on SecurityWeek.
Source:: securityweek
Other noteworthy stories that might have slipped under the radar: Android TV botnet Popa linked to Israeli firm, Velvet Ant maintained decade-long stealth, unpatched GCP Config Connector flaw enables takeover.
The post In Other News: Apple Patches Beats Eavesdropping Flaw, DOT Closes Delta CrowdStrike Probe, AWS Continuum appeared first on SecurityWeek.
Source:: securityweek
Ransomware Is About Leverage: Return on Risk Takes It Away
| June 30th, 2026Cal Water Confirms User Credentials Exploited in Hacking
| June 25th, 2026By algerj@bnpmedia.com (Jordyn Alger)
A Cal Water spokesperson reached out to Security magazine with an update on its investigation.
Source:: Security magazin
Hackers Exposed Knicks, Madison Square Garden Data
| June 25th, 2026By algerj@bnpmedia.com (Jordyn Alger)
Security leaders discuss the release of Knicks and Madison Square Garden customer and corporate data.
Source:: Security magazin