> TritonInfoSec News
Home / Sep 28, 2026 / Story
0
#3 SecurityWeek general September 27, 2026 at 09:23 UTC

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

By Eduard Kovacs

AI Summary

CISA added CVE-2026-65660, a Microsoft SharePoint vulnerability, to its Known Exploited Vulnerabilities catalog with a federal agency patching deadline of September 28, confirming active exploitation in the wild. SharePoint servers are a recurring target for initial access due to their internet-facing deployment and integration with corporate identity systems. Federal agencies and enterprises running SharePoint on-premises must treat this as an emergency patch given the KEV listing and imminent deadline.

Read full article → https://www.securityweek.com/microsoft-sharepoint-…

Relevance score: 82.0/100

# More from September 28

  1. 1
    Citrix admins warned to shut down NetScalers over 2 exploited zero-days BleepingComputer
  2. 2
    Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation The Hacker News
  3. 4
    GitHub Actions re-enabled with Mini Shai-Hulud payload still active BleepingComputer
  4. 5
    Cloudflare fixes Containers cross-tenant flaw exposing customer data BleepingComputer
  5. 6
    New x47.c Windows Botnet Weaponizes xAI Grok, AI API Draining SecurityWeek
  6. 7
    OpenAI's AI agents accidentally uploaded user-provided images to third-party sites BleepingComputer
  7. 8
    OpenAI Says Its Models Engaged With US Government Websites in New Model Misbehavior Disclosure SecurityWeek
  8. 9
    Zero Trust for AI Agents Starts With Fixing Zero Visibility The Hacker News
  9. 10
    Microsoft pauses KB5002907 update after Office license deactivations BleepingComputer