A Microsoft SharePoint vulnerability known as CVE-2026-65660 is now being exploited for attacks, about six weeks after Microsoft announced patches and a few days after researchers disclosed technical details. CVE-2026-65660 is a remote code execution vulnerability that was addressed by Microsoft in the August 2026 Patch Tuesday updates. The company’s advisory describes it as a … Read more
Anthropic just announced a new Claude Marketplace that brings together all AI-related tools in one place, including plugins, connectors, agents, and more. Claude’s marketplace is already public and Anthropic says it already offers more than 2,000 connectors and plugins. These plugins or connectors are available from companies like Atlassian, Google, Microsoft, Notion, Salesforce and others, … Read more
According to Qrator, a threat actor has sold access to a new Windows botnet that relies on AI to maintain persistence on infected hosts. Synchronized x47.cit is promoted by a threat actor called WraithTools as a provider of distributed denial of service (DDoS) and credential theft capabilities, SOCKS5 proxies, and an AI API drain method. … Read more
The ShinyHunters extortion gang uses a URL encryption trick to bypass web application firewall rules that mitigate the Oracle PeopleSoft CVE-2026-35273 vulnerability, allowing threat actors to re-exploit the vulnerability on vulnerable servers. Mandiant and Google’s Threat Intelligence Group (GTIG) say this new technique allowed the threat actor to once again target PeopleSoft servers that had … Read more
China and the United States agreed to establish a channel to deal with AI-related incidents and accelerate work on military crisis communications after a three-day summit between President Xi Jinping and President Donald Trump in Washington, the two governments said on Saturday. They also agreed to continue cooperation through a trade committee focused on selected … Read more
OpenAI has confirmed that it is aware of a new security incident in which its AI agents uploaded user-provided images to third-party image hosting services. According to OpenAI, most users were not affected as only 53 incidents were identified where agents accidentally uploaded images to the internet. The disclosure is the result of a broader … Read more
According to cryptocurrency exchange Bitget, the hackers who stole approximately $351.6 million in digital assets from its systems used techniques very similar to those used by known North Korean threat actors. “Based on IP behavior patterns and on-chain analysis, the attack method in this incident is highly consistent with known patterns of North Korean hacking … Read more
Secure file-sharing software company Kiteworks is asking customers worldwide to temporarily shut down their servers for a period of six hours on Saturday after receiving a threat alert of a possible impending cyberattack. According to German technology publication HeiseKiteworks CISO Frank Balonis warned customers via email that the company had received “credible threat intelligence from … Read more
Weekly from SecurityWeek Cybersecurity News Summary provides a succinct overview of key developments that may not be covered entirely in isolation but are nonetheless relevant to the broader threat landscape. This curated summary highlights key stories about vulnerability disclosures, new attack vectors, policy updates, industry reports and other notable events to help readers stay well-informed … Read more
Microsoft has announced that the Windows Deployment Services (WDS) server role will be deprecated starting with the next Windows Server release. WDS is a redesigned version of Remote Installation Services (RIS) that allows IT administrators to remotely install Windows operating systems on fleets of dozens or hundreds of computers over a network. After WDS is … Read more