Security Digest - September 9, 2026

Daily security intelligence briefing for infrastructure and endpoint management teams. Consolidated from authoritative research, vendor advisories, and community discussions.

• Generated (UTC): 2026-09-09 17:26:56 +00:00
• Lookback window: 7 days

🚀 Top Research & Advisories

• Google warns of new Chrome zero-day bug exploited in attacks - (Reddit r/cybersecurity) submitted by /u/homothebrave [link] [comments]

  Action: Validate Chrome coverage; update managed package if needed.

• New Microsoft Defender ‘ShieldCrash’ zero-day grants SYSTEM access - (BleepingComputer) System.Xml.XmlElement

  Action: Review security controls and policy updates.

🛡 Security Ops

• CrowdStrike is forcing you to use an AI to open support tickets and it’s awful. - (Reddit r/cybersecurity) Review sensor guidance and deployment posture.

• MFA’s Weakest Link: Account Recovery Is the New Attack Path - (BleepingComputer) Review CA/MFA settings for tightening opportunities.

🛠 Infrastructure & Endpoint Control

• Hackers Chain Chrome and Windows Zero-Days in New BlueMoon Exploit Kit Attacks - (CybersecurityNews) Validate Chrome coverage; update managed package if needed.

• How a PortSwigger lab turned into a 15-hour investigation and exposed a silent bug in the BApp Store’s #1 extension (JWT Editor). - (Reddit r/cybersecurity) Review Office update channel health and security baseline compliance.

• Microsoft Edge Add-ons store pipeline strained by AI submissions - (Neowin) Validate Edge/WebView2 coverage; refresh managed package.

• Microsoft releases Windows 10 KB5122878 extended security update - (BleepingComputer) Validate workstation security baseline and update compliance.

• Microsoft September 2026 Patch Tuesday fixes 966 flaws, 2 zero-days - (BleepingComputer) Evaluate update rings and expedite actions if needed.

• Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs - (Reddit r/cybersecurity) Evaluate update rings and expedite actions if needed.

• Windows 11 could be getting auto dark mode that works on a schedule - (Neowin) Validate workstation security baseline and update compliance.

• Windows 11 cumulative updates KB5124008 & KB5122880 released - (BleepingComputer) Validate workstation security baseline and update compliance.

🔍 Quick Links (Watch Items)

• Hackers Chain Chrome and Windows Zero-Days in New BlueMoon Exploit Kit Attacks - (CybersecurityNews)
• Darkhotel Has Not Exploited a Single Critical Vulnerability. Other Attacker Groups Exploit Nothing Else. - (Reddit r/cybersecurity)
• Built an MCP Security Scanner - (Reddit r/cybersecurity)
• CNAPP recommendations for a small team on EKS? - (Reddit r/cybersecurity)
• Would you trust an application developed by a security professional, an average developer and a terrible tester? - (Reddit r/cybersecurity)
• Realistically, what are the risks of your average iphone user being hit with the Dark sword exploit for ios? - (Reddit r/cybersecurity)
• Hackers Use Hundreds of AI Agents to Exploit PaperCut Flaws and Compromise 440 Servers Worldwide - (CybersecurityNews)
• ClearFake Deploys Crypto Stealer That Uses Vulnerable Driver to Kill EDR Security Tools - (CybersecurityNews)
• MapLibre Vulnerability Exposes 2.7M Users to Zero-Click Attacks - (CybersecurityNews)
• Android Security Update September 2026 – Fix for Critical Flaws that Enable RCE Attacks - (CybersecurityNews)