CISA says hackers are actively exploiting a Microsoft SharePoint server flaw, putting organizations with exposed SharePoint systems at risk. The issue, CVE-2026-65660, is described here as a high-severity code-injection bug in SharePoint; CISA has given federal agencies until September 28, 2026 to apply fixes or mitigations. The article does not provide affected versions or technical exploit details.
Why it matters: Organizations running on-premises SharePoint should treat this as urgent because CISA says real attacks are underway. Administrators should identify exposed SharePoint servers, apply Microsoft's fixes or mitigations immediately, and check for signs of compromise.
info@thehackernews.com (The Hacker News)
2026.09.26
91% relevant
This article appears to update the same underlying event by reporting active in-the-wild exploitation of the SharePoint flaw and pairing it with additional reporting context from The Hacker News.
Bill Toulas
2026.09.25
100% relevant
The article establishes a concrete new event: CISA publicly states active exploitation of SharePoint CVE-2026-65660 and sets a federal patch deadline, and no existing tracked story matches this specific CVE.
← Back to all stories