Matt Mullenweg says he is back in control of Automattic, just days after the company’s board placed him on leave and named CFO Mark Davies interim CEO. The apparent leadership reversal remains unconfirmed by Automattic, while changes to internal Slack access suggest the dispute may have moved from a boardroom fight into an operational incident.

Source

Microsoft published the Cloud Web Applications Threat Matrix. It maps attack techniques against cloud-hosted web applications and serverless platforms using the MITRE ATT&CK framework, a public catalog of attacker tactics and techniques. The matrix covers services such as Azure App Service, AWS Lambda, and Google Cloud Run. It follows earlier Microsoft matrices for Kubernetes and cloud storage. If you manage Azure subscriptions or review cloud deployments, the matrix gives you a structured checklist for visibility, hardening, and incident response gaps.

Source

Automattic CEO and WordPress co-founder Matt Mullenweg has been placed on paid leave, while CFO Mark Davies takes over as interim CEO. Mullenweg said in a company-wide Slack message that Davies and three board members coordinated the move without his knowledge and that he voted against it.

Source

Chrome 153 is rolling out across desktop, Android, and iOS as Google begins delivering major Chrome updates every two weeks instead of every four. The faster cadence is intended to shorten the wait for security fixes, performance improvements, and web-platform changes as online threats evolve more quickly.

Source

Google has released Chrome 153 with fixes for 230 security vulnerabilities, including CVE-2026-87491, a V8 zero-day that attackers are already exploiting. Administrators should prioritize Chrome 153.0.8010.36 or.37, depending on the operating system, across managed endpoints.

Source

Google has released Chrome 152.0.7977.82/.83 to fix CVE-2026-85046, a high-severity V8 zero-day that attackers are already exploiting. The update also addresses 11 other vulnerabilities and is rolling out gradually, so administrators should verify that managed endpoints receive the fix rather than waiting for automatic deployment.

Source

Microsoft is moving the Teams web client from `teams.microsoft.com` to `teams.cloud.microsoft`, with the redirect rollout expected to finish by the end of September 2026. Existing bookmarks and Teams links should continue working, but administrators need to check enterprise access controls and integrations before the old address is retired.

Source

Microsoft Edge is beginning to block JavaScript `unload` handlers by default, putting legacy websites, WebView2 applications, and managed browser environments on a migration deadline of September 5, 2026. The staged rollout starts by affecting about 60% of page loads in Edge 152 and 153, rises to 80% in Edge 154, and reaches all page loads in Edge 155.

Source

Alex Kantrowitz interviews Cloudflare CEO Matthew Prince about the web’s rapid shift toward AI-driven traffic, the future of online publishing, and the risks for small businesses. Prince says automated requests have already surpassed human browsing and could reach 1,000 times human traffic within five years, forcing major changes to infrastructure and internet economics.

Source

Firefox 155 and Thunderbird 155 are the first products to arrive under Mozilla’s new two-week release cadence, landing only days after the previous builds. The change follows Thunderbird’s move to fortnightly releases after version 153 became the ESR baseline, giving administrators a choice between rapid features and slower, security-focused maintenance.

Source

Microsoft Defender for Office 365 is incorrectly classifying legitimate Google search URLs as malicious, blocking users with “Opening this website might not be safe” warnings. Microsoft is investigating the Safe Links incident, tracked as MO1465962, while administrators may also see related detections in the Defender portal and Microsoft Sentinel.

Source

Microsoft released a security baseline for Microsoft Edge version 151 on August 25, 2026. The package adds six enforced isolation and data-protection policies plus one optional HTTPS setting for evaluation. For a summary of what each control does and why Microsoft recommends it, see Microsoft Edge 151 baseline adds six security controls. This article focuses on how to deploy and verify those settings in Active Directory and Intune.

Source