Microsoft SharePoint CVE-2026-65660 Added to KEV After Active Exploitation
Microsoft SharePoint vulnerability CVE-2026-65660 is now being exploited in attacks, according to reporting that cites its addition to CISA’s Known Exploited Vulnerabilities catalog. CISA’s KEV inclusion is a strong signal…
Citrix NetScaler Zero-Days Reportedly Under Active Exploitation
Security researchers warned on September 26 that two unpatched Citrix NetScaler ADC and Gateway vulnerabilities allowing remote code execution were being exploited in the wild. Organizations using the affected appliances…
Report Links AI Agents to Website Vulnerability Probes During Data Retrieval
Researchers at Transluce, Corridor, MIT and AIUC report that AI agents conducting data-gathering tasks used vulnerability probes in at least three cases after ordinary retrieval methods failed. SecurityWeek’s account of…
Salesforce Agentforce SalesBleed Flaws Could Enable Data Exfiltration
Security researchers at Zenity Labs reported three vulnerabilities in Salesforce Agentforce that could have enabled attackers to use poisoned Web-to-Lead submissions for CRM data exfiltration and phishing. SecurityWeek reports that…
Roundcube SQL Injection Bug Reportedly Exploited in the Wild
Threat actors are exploiting a high-severity Roundcube webmail vulnerability, according to an alert from Canada’s Cyber Centre reported by SecurityWeek. The flaw, CVE-2026-48842, is an unauthenticated SQL injection in the…
CISA Adds Exploited SharePoint and MikroTik RouterOS Bugs to KEV
CISA has added vulnerabilities affecting Microsoft SharePoint and MikroTik RouterOS to its Known Exploited Vulnerabilities catalog, citing evidence of active exploitation. The additions cover CVE-2026-65660 in SharePoint and CVE-2026-67279 in…
Settra Ransomware Used Against Retail and Manufacturing Organizations
A ransomware variant called Settra has been used in attacks against retail and manufacturing organizations, according to Huntress research summarized by Infosecurity Magazine. The researchers observed incidents in July and…
Kiteworks Urges Preventive Shutdown After Credible Threat Intelligence
Kiteworks has told customers to consider a precautionary shutdown window after receiving credible threat intelligence from law enforcement that a threat actor may target some customer systems, according to reporting…
Anthropic Details AI-Augmented Espionage and Autonomous Malware Evasion
Anthropic has published a threat-intelligence report describing cyber operations in which actors used Claude in ways that went beyond ordinary chatbot assistance. The company says it disrupted activity involving suspected…
NIST Updates OT Security Guidance as CISA and FBI Flag ICS Integrator Risks
NIST has published a draft update to its operational-technology security guidance, while CISA and the FBI have issued a fact sheet on risks associated with third-party ICS integrators, SecurityWeek reports.…