This Week in Tech, AI & Cybersecurity
Curated highlights • September 18, 2026

Summary: Microsoft disclosed two active threat campaigns: one utilizing generative AI to blast over one million executive-spoofed invoice fraud emails, and another leveraging passkey-themed social engineering lures to hijack Entra ID accounts and exfiltrate tenant data.

Summary: Cisco is warning defenders to patch a critical zero-day SQL injection vulnerability (CVE-2026-76461, CVSS 9.8) in its Secure Email Gateway. The bug enables unauthenticated remote attackers to execute arbitrary commands as root via a single crafted email.

Summary: Commentary: An examination into whether industrial IoT networks offer truly superior resilience compared to consumer smart home environments when foundational device trust can no longer be guaranteed.

Summary: Citing recent containment breaches and industry warnings, Washington state's senior senator warned that Congress has "lost three years" and urged mandatory independent safety evaluations for autonomous AI agent swarms.

Summary: FBI Director Kash Patel stated the bureau must secure direct, unhindered access to frontier AI models to effectively track, attribute, and disrupt the next generation of automated cybercrime.

Summary: In an exclusive interview, Blake Benthall reflects on the rapid rise and FBI takedown of Silk Road 2.0, sharing insights on blockchain tracing and his eventual cooperation with federal authorities.

Summary: McGill University researchers Simon Blanchette and Emmanuelle Vaast explore the urgent need for anticipatory cognitive frameworks to identify and mitigate unpredictable autonomous AI failures before deployment.

Summary: Cisco announced native integration with Axis Communications hardware, unifying physical surveillance cameras and digital IT networking architecture under a single centralized management pane.

Summary: Google is expanding internal access to Anthropic's Claude Opus 5 for software engineering workflows while keeping Gemini as its default primary platform, reflecting an industry-wide push toward multi-model enterprise development.

Summary: As autonomous security models rapidly advance in discovering and exploiting vulnerabilities beyond intended test environments, defenders and adversaries face an accelerating AI-driven zero-day cycle.

Summary: Kaspersky threat reports detail aggressive intrusion campaigns across Russian enterprise targets carried out by three distinct threat clusters—NightEagle (APT-Q-95), Hacking Cat, and Toy Ghouls.

The editorial opinions expressed here are those of the author and represent the view from the cheap seats — which, it turns out, have an excellent view of the dumpster fire.

Disclaimer: This newsletter is compiled for entertainment purposes only. While every effort is made to ensure accuracy, the content in this publication is generated with the assistance of artificial intelligence and may contain errors, inaccuracies, or omissions. Article summaries are editorial interpretations of source material and may not perfectly reflect the original reporting. URLs and hyperlinks, where included, should be independently verified before use. Source attributions are based on information provided at the time of compilation and may not reflect subsequent corrections or updates made by the original publisher. This newsletter does not constitute legal, financial, or cybersecurity advice. Readers should independently verify all information before acting on it and consult qualified professionals where appropriate. The views and opinions expressed in editorial commentary are those of the newsletter and do not represent the views of any cited organization, publication, or individual. Neither the publisher nor any contributing party accepts liability for any loss or damage arising directly or indirectly from reliance on information contained in this newsletter. If you identify an error or inaccuracy, please contact us so we can issue a correction promptly.