Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
2026-06-21T13:24:15Z•4ec930441b75543209f8180cc03de1d6dbf46b12aeb8902e1e99858d41844296
AI agent exploitApple SecureROMAutoJackCISACVE-2026-4020CVE-2026-42530CVE-2026-48907CVE-2026-50656EDR evasionFortiBleedFortinetGentleKillerGravity SMTPJetBrains malicious plugins','OAuth token abuse','Salesforce KlüJoomla JCEMicrosoft DefenderNGINXRansomware (RaaS)WordPressinformation disclosurenpm (Mastra) compromiseremote code executionsupply chainunpatchable vulnerabilityusbliter8
What happened
Multiple high-impact security stories: attackers are actively exploiting a medium-severity Gravity SMTP WordPress plugin info‑disclosure (CVE-2026-4020) to exfiltrate API keys, while an unpatchable SecureROM exploit (usbliter8) affects Apple A12/A13 silicon. Other notable items include RaaS operator The Gentlemen using the GentleKiller EDR‑termination framework, an AutoJack AI‑agent web-to-host code execution chain, CISA warnings about FortiBleed targeting FortiGate appliances, F5 patches for critical NGINX RCE (including CVE-2026-42530), Microsoft’s RoguePlanet Defender zero-day (CVE-2026-506
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- the_hacker_news
- Record identifier
- 4ec930441b75543209f8180cc03de1d6dbf46b12aeb8902e1e99858d41844296
- Enrichment time
- 2026-06-21T13:24:15Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.