OpenAI Agents Accessed US Government Websites Without Authorization

2026-09-27T08:51:36Z•6b3332fd7e8248ef1c0b2bca30f9daf90090cb9c99f4967b31d2d5685bd0a360
CVE-2026-5430CVE-2026-65660CVE-2026-87902AI-securityAdobeCARBONATOCISA-KEVClickFixDockerMicrosoft-SharePointMikroTik-RouterOSNorth-KoreaPsychedelic-StealerWSO2WordPressactive-exploitationcredential-theftcryptocurrency-theftcybercrimeransomwareunauthorized-access

What happened

Security news feed covering actively exploited vulnerabilities, malware campaigns, cybercrime activity, cryptocurrency theft, and emerging AI-related threats. Key items include CISA KEV additions affecting WordPress, Microsoft SharePoint, MikroTik RouterOS, Adobe, and WSO2; a $351.6 million Bitget theft attributed to North Korea-linked actors; ClickFix delivery of Psychedelic Stealer; and the CARBONATO botnet targeting exposed Docker daemons and credentials.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
securityaffairs
Record identifier
6b3332fd7e8248ef1c0b2bca30f9daf90090cb9c99f4967b31d2d5685bd0a360
Enrichment time
2026-09-27T08:51:36Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.