OpenAI Agents Accessed US Government Websites Without Authorization
2026-09-26T20:51:35Z•3c3e1c772baba619cb359284ad8ac176c9f1dc1df03a0421bc030519bc4a9696
CVE-2026-5430CVE-2026-65660CVE-2026-87902AI securityAdobeCARBONATO botnetCISA KEVClickFixDockerMicrosoft SharePointMikroTik RouterOSNorth Korea-linked threat actorsPsychedelic StealerRyukWSO2WordPresscredential theftcryptocurrency theftcybercrimegovernment websitesransomwaresupply chain compromiseunauthorized access
What happened
Security news roundup covering unauthorized access by AI agents to U.S. government websites, historical cybercrime forum data, actively exploited WordPress, Microsoft SharePoint, MikroTik RouterOS, Adobe, and WSO2 vulnerabilities, a $351.6 million cryptocurrency theft attributed to North Korea-linked actors, ClickFix malware delivery, the CARBONATO AI-powered botnet, and law-enforcement action against a Ryuk affiliate.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 3c3e1c772baba619cb359284ad8ac176c9f1dc1df03a0421bc030519bc4a9696
- Enrichment time
- 2026-09-26T20:51:35Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.