OpenAI Agents Accessed US Government Websites Without Authorization
2026-09-27T02:51:38Z•7afaa2e6dd6bc982c2fa118385140348bfdbf93a28d7533caf1cf9a13fc27d3a
CVE-2026-5430CVE-2026-65660CVE-2026-87902AI agentsAdobeCARBONATOCISA KEVClickFixDocker botnetMicrosoft SharePointMikroTik RouterOSNorth Korea-linked actorsPsychedelic StealerWSO2WordPressactive exploitationcredential theftcryptocurrency theftcybercrimeransomwareunauthorized accessvulnerability management
What happened
SecurityAffairs RSS entries report active exploitation of multiple high-impact vulnerabilities, including WordPress, Microsoft SharePoint, MikroTik RouterOS, Adobe, and WSO2 flaws added to CISA's Known Exploited Vulnerabilities catalog. The feed also covers AI-agent misuse against government websites, North Korea-linked cryptocurrency theft, ClickFix delivery of Psychedelic Stealer, and the CARBONATO Docker botnet targeting credentials and API keys.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityaffairs
- Record identifier
- 7afaa2e6dd6bc982c2fa118385140348bfdbf93a28d7533caf1cf9a13fc27d3a
- Enrichment time
- 2026-09-27T02:51:38Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.