60
45
30
Microsoft September 2026 Patch Tuesday Fixes 973 Vulnerabilities and 2 Exploited Zero-Days
Microsoft's September 2026 Patch Tuesday fixes 973 vulnerabilities, including two zero-days already exploited in the wild.
Microsoft's September 2026 Patch Tuesday addresses 973 vulnerabilities across Windows, Office, and Azure components, including two zero-days already exploited in the wild. CVE-2026-81963, an elevation of privilege flaw in the Windows Update Stack, is flagged as an exploited zero-day. The release includes numerous remote code execution and information disclosure fixes for Microsoft Excel and Word, plus patches for the Windows kernel, ALPC, Print Spooler, ReFS, Entra ID, and Azure CLI.
80
Aggah Campaign: Bit.ly, BlogSpot, and Pastebin Used for C2 in Large Scale Campaign
Aggah campaign abuses Bit.ly, BlogSpot, and Pastebin as multi-hop C2 to deliver RevengeRAT across the Middle East, US, Europe, and Asia.
Unit 42 details the Aggah campaign, which began with spearphishing emails in March 2019 spoofing a large financial institution and targeting education, media/marketing, and government organizations in the Middle East, later expanding to the US, Europe, and Asia. Delivery documents use Template Injection to load a remote OLE file whose macro runs mshta against a Bit.ly link redirecting to a BlogSpot post, which then uses Pastebin pastes to download RevengeRAT configured with a duckdns[.]org C2 domain. The embedded script also deletes Microsoft Defender signatures and kills Defender and Office processes, and modifies registry keys to enable macros. High-level TTPs resemble the Gorgon Group, but Unit 42 could not confirm attribution.
50
30
Anthropic’s Text Watermarking Proves AI Companies Do Not Care at All About Writing
Anthropic will watermark Claude outputs by biasing low-stakes word choices, a method it says complies with EU AI regulations.
Anthropic detailed how future Claude versions will carry a statistical watermark by altering the source of randomness used to pick among near-synonymous words, adding no hidden characters or metadata; a key holder can compute a probability that text was Claude-generated. The company says internal testing showed no impact on quality, creativity, or readability, and frames the change as compliance with new EU AI regulations. Critics including John Gruber and Jeff Jarvis argue the method treats synonyms as interchangeable and devalues writing, a view echoed in this 404 Media opinion piece.
45
30
30
47
Safe word: What is it and why do you need one?
ESET recommends pre-agreed family safe words to counter AI voice-clone scams such as virtual kidnapping, as one-in-four Americans report receiving deepfake calls.
ESET outlines how scammers use just seconds of audio scraped from social media or work content to create convincing voice clones, with a Hiya report finding one-in-four Americans received a deepfake voice call in the past 12 months. Common schemes include virtual kidnapping calls mixing cloned voices with sobbing and background noise. A pre-agreed, non-OSINT-discoverable safe word, plus callback verification via known numbers and 2FA, reduces success rates of these frauds.
15
42
30
57
30
42
30
30
42
57
60
30
55
Do speech foundation models really learn words?
Researchers show via residualization that later layers of HuBERT and wav2vec 2.0 encode word identity and semantics independently of phonetic content.
The study argues that discriminative ability on words does not imply specialized word representations, since good word discrimination can be explained by phoneme encoding alone. By partialling out phoneme information using residualization, the authors show that later layers of HuBERT and wav2vec 2.0 encode words with reasonable fidelity independently of local phonetic content. Applying this disentanglement approach enhances higher-order linguistic information in word discovery tasks, informing analysis of speech foundation models used for recognition and speech tokens.
28
50
30
30
30
60
55
60
47
Retrospectively Reverse-Engineering Apple's Neural Engine
A developer reverse-engineers Apple's M1 Neural Engine architecture, mapping compute cores, MAC datapaths, and schedulers to explain the NPU's decline as transformers displaced CNN workloads.
A developer who previously maintained a reverse-engineered Linux driver for Apple's Neural Engine (ANE) published a retrospective deep dive mapping the M1 ANE's full internal architecture: compute, datapath, scheduler, memory, and execution model. The M1 ANE has 16 compute cores with 128 FP16 (or 256 INT8) MAC lanes each, totaling 2048 parallel MAC lanes, using 32-bit Q16.16 fixed-point accumulation with FP16 readout and an accumulator that saturates at 2^15. The author argues the ANE's dataflow was architected around the predictable reuse patterns of 2017-era CNN workloads (dating to the A11 Bionic), which autoregressive transformer decode broke, limiting its usefulness for general ML. With Apple's M5 folding ANE cores into GPU cores to tout LLM performance, the post frames this as the beginning of the end for the standalone NPU.
28
30
30
35
60
35
57
30