Security Digest - September 15, 2026

Daily security intelligence briefing for infrastructure and endpoint management teams. Consolidated from authoritative research, vendor advisories, and community discussions.

• Generated (UTC): 2026-09-15 22:45:58 +00:00
• Lookback window: 7 days

🚀 Top Research & Advisories

• No high-priority security research detected in this window.

  💻 AppSec

• CVE-2026-47680 - (NVD) Monitor developer tool vulnerabilities and supply chain risks.

🏗 Infrastructure

• Cybersecurity professionals: What problem still exists between detection and response? - (Reddit r/cybersecurity) Review security controls and policy updates. Review sensor guidance and deployment posture. Review VPN client version and deployment.

• wtf did I get into…standing up shadow AI detection from nothing…anyone else doing this? - (Reddit r/cybersecurity) Review Office update channel health and security baseline compliance. Review sensor guidance and deployment posture. Review server hardening and AD security posture.

🛡 Security Ops

• Cybersecurity professionals: What problem still exists between detection and response? - (Reddit r/cybersecurity) Review security controls and policy updates. Review sensor guidance and deployment posture. Review VPN client version and deployment.

• wtf did I get into…standing up shadow AI detection from nothing…anyone else doing this? - (Reddit r/cybersecurity) Review Office update channel health and security baseline compliance. Review sensor guidance and deployment posture. Review server hardening and AD security posture.

🛠 Infrastructure & Endpoint Control

• CVE-2026-53581 - (NVD) Review security controls and policy updates.

• CVE-2026-53639 - (NVD) Evaluate update rings and expedite actions if needed.

• CVE-2026-87429 - (NVD) Validate Chrome coverage; update managed package if needed.

• CVE-2026-87430 - (NVD) Validate Chrome coverage; update managed package if needed.

• CVE-2026-87431 - (NVD) Validate Chrome coverage; update managed package if needed.

• CVE-2026-87432 - (NVD) Validate Chrome coverage; update managed package if needed.

• CVE-2026-87433 - (NVD) Validate Chrome coverage; update managed package if needed.

• CVE-2026-87434 - (CVE.org) Validate Chrome coverage; update managed package if needed.

• CVE-2026-87435 - (CVE.org) Validate Chrome coverage; update managed package if needed.

• CVE-2026-87436 - (CVE.org) Validate Chrome coverage; update managed package if needed.

• Cybersecurity professionals: What problem still exists between detection and response? - (Reddit r/cybersecurity) Review security controls and policy updates. Review sensor guidance and deployment posture. Review VPN client version and deployment.

• Microsoft confirms KB5002914 Excel update breaks copy and paste - (BleepingComputer) Review Office update channel health and security baseline compliance.

• Microsoft confirms Word can crash with some third-party apps - (Neowin) Review Office update channel health and security baseline compliance.

• Microsoft has decided against killing an Outlook Classic feature after all - (Neowin) Review Office update channel health and security baseline compliance.

• Microsoft is ending support for Windows 11 23H2 Education and Enterprise soon - (Neowin) Validate workstation security baseline and update compliance.

• Microsoft is letting Windows 11 users reclaim keys lost to the Copilot key - (Neowin) Validate workstation security baseline and update compliance.

• New Outlook and Teams are getting a crucial feature, but Classic Outlook is being skipped - (Neowin) Review Office update channel health and security baseline compliance.

• Steam vulnerability on Windows lets any normal user silently escalate to SYSTEM - (Reddit r/cybersecurity) Validate workstation security baseline and update compliance.

• wtf did I get into…standing up shadow AI detection from nothing…anyone else doing this? - (Reddit r/cybersecurity) Review Office update channel health and security baseline compliance. Review sensor guidance and deployment posture. Review server hardening and AD security posture.

🩹 Patch Tuesday & Update Experience

• CVE-2026-53639 - (NVD) Sylius is an Open Source eCommerce Framework on Symfony. Starting in version 2.0.0 and prior to version 2.0.18, 2.1.15, and 2.2.6, the GET /api/v2/shop/payment-requests/{hash} and `PUT /api/v2/shop/…

🔍 Quick Links (Watch Items)

• Public cve’s - (Reddit r/cybersecurity)
• With everything going on with AI, I would like to know what we should do to prepare. - (Reddit r/cybersecurity)
• A problem with a shared hosting account - (Reddit r/cybersecurity)
• Cybersecurity professionals: What problem still exists between detection and response? - (Reddit r/cybersecurity)
• Steam vulnerability on Windows lets any normal user silently escalate to SYSTEM - (Reddit r/cybersecurity)
• wtf did I get into…standing up shadow AI detection from nothing…anyone else doing this? - (Reddit r/cybersecurity)
• Red Heron exploits Gitea n-day flaw in multinational campaign, exposing new Linux rootkit - (Reddit r/cybersecurity)
• Homebrew 7.0.0 gets built-in GUI, better security controls - (BleepingComputer)
• CVE-2026-87436 - (CVE.org)
• CVE-2026-87436 - (NVD)