GoKawiil
Tech News
Fleet Device Management has been admitted to Project Glasswing, Anthropic's controlled-access program for its Claude Mythos Preview model. Fleet will use the early access to explore how frontier AI could help IT teams detect and remediate device vulnerabilities faster, aiming to shrink the delay between when threats appear and when organizations patch them.
PaperCut disclosed active exploitation of PaperCut NG/MF servers on August 27 with no CVE, no available exploit sample, and no patch. An emergency fix issued the next day was bypassed within hours, and a third patch only arrived on September 1, leaving customers exposed for roughly six days while attackers were already using the flaw in live attacks. A security researcher uses the episode to argue that the industry's old assumptions about response timelines no longer hold.
SimpliSafe launched the Video Doorbell Series 2, a $199.99 wired camera with 2K resolution, 10x zoom, and two-way audio that pairs with its Active Guard Outdoor Protection service starting at $49.99 a month. When onboard AI and cloud-based computer vision flag suspicious activity, a human monitoring agent can view the live feed, speak through the doorbell, and try to scare off intruders or package thieves. The doorbell requires a SimpliSafe base station and keypad and works with monitored or self-monitored plans.
Apple released detailed security changelogs for macOS 27 Golden Gate, macOS Tahoe 26.7, and macOS Sequoia 15.8, collectively addressing more than 200 vulnerabilities. The flaws include bugs that could let attackers execute code with kernel or root privileges, escape the sandbox, bypass Gatekeeper, or trigger remote code execution via Bluetooth, CUPS, and WebDAV.
Nintendo disclosed a security flaw affecting original Switch consoles that exploits the QR codes used by the Send to Smartphone feature and Super Mario Kart: Home Circuit's wireless pairing. If someone scans the QR code before the owner does, they can connect to the console and run unauthorized code or steal stored account data. Nintendo fixed the issue, tracked as CVE-2026-82079, in firmware update 23.0.0 released September 9.
Alongside its new macOS 27 Golden Gate release, Apple has pushed out macOS Tahoe 26.7 and macOS Sequoia 15.8 as updates for users who haven't moved to the newest OS. Apple describes both as containing important security fixes recommended for all users, though it has not yet published detailed release notes on its security page.
Apple released iOS 26.7 as a smaller companion update on the same day it launched iOS 27, giving iPhone owners who aren't ready to upgrade a way to stay current on security. The update carries no new features, only security fixes, and full patch details are expected to be published by Apple shortly.
An Entrepreneur contributor and founder of roof restoration company Roof Maxx argues that rapid AI-driven change has eliminated the possibility of a stable, 'set-and-forget' business strategy. He contends leaders should replace the pursuit of security with cultivated adaptability, using productive paranoia to question their own assumptions before overhauling their business model.
Beyond the usual OS and security update settings, Android devices include a distinct, less visible menu for updating individual system services like Google Play services. Depending on the manufacturer, these services may need to be updated separately from the main software update screen, and how they appear can vary between brands such as Google Pixel and others.
BleepingComputer is hosting a live webinar on September 23, 2026, with Material Security's Rajan Kapoor and Fireside Consulting's Rick Fitzgerald, who will dissect two real breaches of Google Workspace environments carried out through malicious OAuth applications and social engineering rather than stolen passwords. The session will walk through how the attacks unfolded, the security gaps that let them succeed, and the response decisions made in the early hours of each incident.
Google appears to be developing a way for users to customize which restrictions apply under Android's Advanced Protection mode, rather than enforcing all safeguards as a single bundle. This would let users opt into stronger security features selectively instead of accepting the full, more restrictive package.
New research indicates that scammers using AI-generated voices that mimic a target's own accent are more effective at deceiving victims than generic synthetic voices. The findings suggest that accent-matching adds a layer of perceived familiarity and trust that makes fraudulent calls more convincing.