The Joomla project has released Joomla 3.6.5. It addresses three security bugs and adds security hardening to several areas. You can read the announcement here. The update was applied to all our client sites within a couple of hours of its release.