Security Digest - September 22, 2026

Daily security intelligence briefing for infrastructure and endpoint management teams. Consolidated from authoritative research, vendor advisories, and community discussions.

• Generated (UTC): 2026-09-22 17:50:55 +00:00
• Lookback window: 7 days

🚀 Top Research & Advisories

• New Windows Defender zero-day blocks Microsoft antivirus updates - (BleepingComputer) System.Xml.XmlElement

  Action: Review security controls and policy updates.

🛠 Infrastructure & Endpoint Control

• Microsoft fixes broken Excel copy and paste for all Office users - (BleepingComputer) Review Office update channel health and security baseline compliance.

• Microsoft releases KB5124010 update for Windows 11 with a long list of new features - (Neowin) Validate workstation security baseline and update compliance.

• Microsoft releases preview update KB5124006 for Windows 11 26H1 - (Neowin) Validate workstation security baseline and update compliance.

• Trump rebrands artificial intelligence as super intelligence - (Neowin) Review Office update channel health and security baseline compliance.

🔍 Quick Links (Watch Items)

• Breaking Down Appsec Part 5: You Have no Business Here (Business Logic Flaws) - (Reddit r/cybersecurity)
• We analyzed 338 million attack simulations in production. Perimeter defense blocks 69% of attacks, but post-compromise blocking drops to 37%. AMA. - (Reddit r/cybersecurity)
• Why does food/beverage get so little attention as critical infrastructure? - (Reddit r/cybersecurity)
• Legit Security ASPM - (Reddit r/cybersecurity)
• CISA orders feds to patch Zyxel flaw exploited for data theft - (BleepingComputer)
• Offered a job as Compliance Specialist - (Reddit r/cybersecurity)
• Hatchet OAuth state CSRF — CVE-2026-61687 - (Reddit r/cybersecurity)
• “Cyber Security is not entry level position” - (Reddit r/cybersecurity)
• FBI’s CJIS v6.1: What Security Teams Need to Know. - (BleepingComputer)
• CVE-2026-12728 - (NVD)