On September 16, 2026, CISA released its first guide to cyber decoys — fake systems, accounts, and data that detect an attacker already present and using legitimate tools. Start with self-hosted honeytokens before considering a commercial platform.
On September 16, 2026, Cisco shipped a batch of fixes for Identity Services Engine, including CVE-2026-76460, an actively exploited CVSS 10.0 authentication bypass that can yield root. Patch ISE immediately and lock down the management plane with ACLs in the meantime.
Stable kernels 7.2.5 and 6.18.51, released September 11, 2026, fix video output for Blackwell GPUs in nouveau and close a memory leak and a use-after-free in ksmbd. Update first if you expose SMB shares or run a Blackwell card.
CVE-2026-76461 (CVSS 9.8), a zero-day in the AsyncOS email parsing of Cisco Secure Email Gateway, has been exploited since September 2026 to turn a SQL injection into root command execution. Cisco offers no workaround and CISA requires a fix by September 17, 2026: patch your Secure Email Gateway appliances now.
GNU Coreutils 9.12, released on September 14, 2026, delivers measurable wins — cut up to 4× faster, uniq up to 2.5× — and fixes a race that made -R commands fail against files deleted in parallel. A maintenance release that reminds us the GNU toolkit remains, against its Rust rewrite, the default foundation of every distribution.
Kubernetes Memory QoS, which guides the Linux kernel on container memory handling through cgroup v2, graduates to beta and turns on by default in version 1.37. The more important change lies elsewhere: the implicit throttling factor disappears, making the upgrade a no-surprise event for existing clusters.
Open-weight models accounted for 60% of OpenRouter’s US token consumption in August, most of them Chinese. The marketplace has now made US in-region routing generally available, guaranteeing that requests are decrypted, processed, and served entirely on American soil — or rejected.
Perplexity has brought Portable Computer, the local edition of its Computer agent, to Windows after Linux and macOS — but only for NVIDIA RTX cards with at least 24 GB of VRAM. Simple tasks run on-device, the model hands off to the cloud when it needs more reasoning, and sensitive files can stay on the machine.
Vaultwarden 1.37.3, released on September 13, 2026, adds rate limiting to the pre-login and auth request endpoints and revokes 2FA remember tokens when credentials change. For a self-hoster, it is a security update to apply without delay.
On September 8, 2026, Google ships Chrome 153, fixing 230 vulnerabilities including CVE-2026-87491, an out-of-bounds write in V8 already exploited in the wild. Update to 153.0.8010.36 or later before the CISA deadline of September 23, and check every Chromium browser in your fleet, Edge, Brave and Opera included.
On September 1, 2026, advisory HPESBNW05134 fixes more than twenty vulnerabilities in ArubaOS-CX, including two independent bugs — CVE-2026-73749 (CVSS 9.8) and CVE-2026-73782 — that each give unauthenticated code execution on a switch. Isolate the management plane and apply the fixed branch before a public exploit turns these flaws into a mass campaign.
In early September 2026, Anthropic, Meta, Google and OpenAI each ship a frontier model in the same week, and CNBC names the phenomenon model fatigue. A model’s real cost now depends on cache and context as much as benchmarks: stop comparing scores, compare the price of your workload.
