Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being exploited in the wild. The shortcomings added to the KEV catalog are listed below - CVE-2026-65400 (CVSS score: 9.8) - An improper authentication vulnerability impacting Apple macOS that could allow an

Reported facts: CISA has added multiple critical vulnerabilities affecting macOS, SharePoint, vCenter, and Microsoft IKE to its Known Exploited Vulnerabilities catalog, confirming they are under active exploitation. These flaws include at least one improper authentication issue in macOS with a critical CVSS score, and collectively pose significant risk to affected infrastructure. RealGround analysis: While not AI-specific, successful compromise of these core platforms can indirectly impact AI systems that depend on them for hosting, identity, or data storage, creating an AI supply chain exposure path. Organizations should inventory where AI workloads and data sit on or behind these products, prioritize patching, and update SBOM and asset maps so AI-related infrastructure inherits timely vulnerability management.