09.09.2026

CSO Online 09.09.2026 03:27
Possibly wormable bugs and two zero-day holes highlight the almost 1,000 fixes issued today by Microsoft in its September Patch Tuesday release.
The 964 vulnerabilities, another record since Microsoft began using AI in the middle of the year to find holes, require customer action. Excluded are 174 third-party/open-source CVEs and 23 Chromium/Edge CVEs, as well as nine Microsoft mitigated vulnerabilities in applications like Azure, Entra, and Copilot Studio where no customer action is required.

Krebs Security 08.09.2026 21:44
Microsoft Corp. today issued updates to plug at least 974 security holes in its Windows operating systems and other software, by far its biggest single patch batch ever. Microsoft says artificial intelligence is helping to speed the discovery of vulnerabilities, but security experts warn that many organizations already are struggling to prioritize the more human-intensive endeavor of testing and deploying so many fixes each month.

The Hacker News 08.09.2026 14:19
Check Point Research said in a report published today that a single instruction planted in a ChatGPT conversation could cause ChatGPT to quietly work for an attacker while answering the user's question as usual.

In the company's proof of concept, that hidden work read data from the user's connected Gmail account and passed it to a second ChatGPT account through a hidden channel

Heise Security 08.09.2026 12:27
Eine KI hat eine Schwachstelle in WeChat gefunden, über die man in kürzester Zeit eine Milliarde Konten hätte übernehmen können. Sie ist bereits geschlossen.

Golem 08.09.2026 08:54
Forscher haben untersucht, wie weitreichend Smart TVs von LG ihre Nutzer tracken und ausspionieren. Ihr Fazit: "Vergleichbar mit Malware". (Sicherheitslücke, LG)

Golem 08.09.2026 06:50
Angreifer sind über eine Schnittstelle von Kleinanzeigen an Nutzerdaten gelangt. Der Anbieter warnt vor einem möglichen Missbrauch für Phishing. (Phishing, E-Mail)