Microsoft, Salesforce Patch AI Agent Data Leak Flaws

This Dark Reading roundup highlights a surge of high-impact vulnerabilities and active campaigns across AI agents, cloud environments, endpoint products and OT. Notable patches include prompt-injection fixes for Salesforce Agentforce and Microsoft Copilot that could have leaked sensitive data; a large Microsoft update dominated by elevation-of-privilege bugs (including two zero-days); an emergency Fortinet FortiClient fix (CVE-2026-35616); and an actively exploited Adobe Acrobat/Reader zero-day used via malicious PDFs. Threat activity includes APT41 delivering a stealthy backdoor to harvest AW