Active Exploitation of Critical Vulnerabilities in macOS, SharePoint, vCenter, and Microsoft IKE Services

Four critical vulnerabilities in macOS, SharePoint, vCenter, and Microsoft IKE are actively exploited in the wild, with reports of ransomware deployments and nation-state actor involvement. The flaws have compromised 361 unique IP addresses across 47 countries, prompting urgent patching advisories from CISA.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild.

The shortcomings added to the KEV catalog are listed below -

CVE-2026-65400 (CVSS score: 9.8) - An improper authentication vulnerability impacting Apple macOS that could allow an

Read original article