Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks
2026-09-28T07:23:59Z•025911552bdd9b8ca397dd0be82cb4cf4b29d3c7a13d19d46f474bc13295057a
CVE-2026-65660AI agent securityAI malwareAPI key theftCISA KEVMicrosoft SharePointNorth KoreaRydoxSalesforce AgentforceWindows botnetactive exploitationcryptocurrency heistcybercrime marketplacedata exfiltrationelection securityprivacy leakagexAI Grokzero-click vulnerability
What happened
SecurityWeek RSS feed covering active exploitation of a Microsoft SharePoint vulnerability, AI-assisted malware and agent abuse, major cryptocurrency theft, election security concerns, privacy leaks, and Salesforce Agentforce zero-click data exfiltration. The most urgent item is CVE-2026-65660, which CISA added to its Known Exploited Vulnerabilities catalog and assigned a federal patching deadline of September 28, 2026.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- 025911552bdd9b8ca397dd0be82cb4cf4b29d3c7a13d19d46f474bc13295057a
- Enrichment time
- 2026-09-28T07:23:59Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.