China and US Agree to Establish AI Safety Channel and Continue Trade and Military Talks
2026-09-26T19:23:58Z•dec66ad2611f85fe5035ca05985c5953bb91249b4848a78c4bf5e8f2ff3b08a0
CVE-2026-48842AI-enabled malwareAPI key theftNorth KoreaRoundcubeSQL injectionSalesforce AgentforceWindows botnetactive exploitationcritical infrastructurecryptocurrency heistcybercrime marketplacedata exfiltrationelection securityprivacy leakagewebmailzero-click
What happened
SecurityWeek feed covering emerging AI-related abuse, botnets, data-exfiltration vulnerabilities, cybercrime, critical infrastructure exposure, and active exploitation. The most actionable item is CVE-2026-48842, an unauthenticated SQL injection in Roundcube Webmail reportedly under active attack. Other notable risks include Salesforce Agentforce zero-click data exfiltration, an AI-enabled Windows botnet, crypto theft, and privacy leakage through file-notification systems.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- securityweek
- Record identifier
- dec66ad2611f85fe5035ca05985c5953bb91249b4848a78c4bf5e8f2ff3b08a0
- Enrichment time
- 2026-09-26T19:23:58Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.