Security Digest - September 22, 2026

Daily security intelligence briefing for infrastructure and endpoint management teams. Consolidated from authoritative research, vendor advisories, and community discussions.

• Generated (UTC): 2026-09-22 22:48:35 +00:00
• Lookback window: 7 days

🚀 Top Research & Advisories

• New Windows Defender zero-day blocks Microsoft antivirus updates - (BleepingComputer) System.Xml.XmlElement

  Action: Review security controls and policy updates.

💻 AppSec

• [Academic Research] Do you have experience with ransomware? - (Reddit r/cybersecurity) Review .NET runtime vulnerabilities and apply patches.

🛡 Security Ops

• Rogue external MFA providers can steal passwords during logins - (BleepingComputer) Review CA/MFA settings for tightening opportunities.

🛠 Infrastructure & Endpoint Control

• Adobe Premiere finally lands on Android, but has steep RAM requirements - (Neowin) Confirm Adobe exposure; push updated deployment.

• CVE-2026-69486 - (NVD) Validate Chrome coverage; update managed package if needed. Validate Edge/WebView2 coverage; refresh managed package.

• CVE-2026-85893 - (NVD) Validate Chrome coverage; update managed package if needed. Validate Edge/WebView2 coverage; refresh managed package.

• CVE-2026-86108 - (NVD) Validate Edge/WebView2 coverage; refresh managed package.

• CVE-2026-86109 - (CVE.org) Validate Edge/WebView2 coverage; refresh managed package.

• Microsoft releases KB5124010 update for Windows 11 with a long list of new features - (Neowin) Validate workstation security baseline and update compliance.

• Microsoft releases preview update KB5124006 for Windows 11 26H1 - (Neowin) Validate workstation security baseline and update compliance.

• Quick tip: How to make Windows 11 apps always open maximized - (Neowin) Validate workstation security baseline and update compliance.

• Trump rebrands artificial intelligence as super intelligence - (Neowin) Review Office update channel health and security baseline compliance.

🔍 Quick Links (Watch Items)

• Best LLM for security professionals - (Reddit r/cybersecurity)
• Chinese hackers exploit WordPress, Zyxel flaws to steal govt data - (BleepingComputer)
• [Academic Research] Do you have experience with ransomware? - (Reddit r/cybersecurity)
• Cogent Security –> Reviews? - (Reddit r/cybersecurity)
• Check Point Management Server 0-Day Vulnerability Actively Exploited in Attacks - (CybersecurityNews)
• Breaking Down Appsec Part 5: You Have no Business Here (Business Logic Flaws) - (Reddit r/cybersecurity)
• Linux KVM/arm64 Vulnerability Lets Attackers Escape Virtual Machines and Gain Host Access - (CybersecurityNews)
• We analyzed 338 million attack simulations in production. Perimeter defense blocks 69% of attacks, but post-compromise blocking drops to 37%. AMA. - (Reddit r/cybersecurity)
• CISA orders feds to patch Zyxel flaw exploited for data theft - (BleepingComputer)
• CVE-2026-86109 - (CVE.org)