Windows administrators report that the September 2026 cumulative updates can cause Remote Desktop Services (RDS) to hang or crash on Windows Server 2019, 2022, and 2025. Microsoft’s release notes separately confirm Remote Desktop problems in Windows Server 2016, including broken audio redirection, while the updates also address a critical RDS remote-code-execution flaw.

Source

Microsoft published the Cloud Web Applications Threat Matrix. It maps attack techniques against cloud-hosted web applications and serverless platforms using the MITRE ATT&CK framework, a public catalog of attacker tactics and techniques. The matrix covers services such as Azure App Service, AWS Lambda, and Google Cloud Run. It follows earlier Microsoft matrices for Kubernetes and cloud storage. If you manage Azure subscriptions or review cloud deployments, the matrix gives you a structured checklist for visibility, hardening, and incident response gaps.

Source

As organizations deploy more AI agents, you need visibility into what those agents do across your environment. Microsoft distributes agent activity monitoring across eight products: Agent 365, the Microsoft 365 admin center, Microsoft Purview, Microsoft Defender XDR, Microsoft Defender for Endpoint, Microsoft Entra ID, Microsoft Security Exposure Management, and Microsoft Intune. These tools share telemetry from Agent 365 observability and surface it in admin, compliance, identity, endpoint, and security dashboards. This article explains what each product does, which agent monitoring features it provides, and what licensing you need to use them.

Source

OpenAI has released the Agents API in public beta, giving developers a way to build long-running AI agents with the same harness and infrastructure used by Codex. The API can manage context, tools, files, code execution, and parallel subagents while allowing each workload to run in an OpenAI sandbox, a developer’s own infrastructure, or a partner environment.

Source

OpenAI is turning ChatGPT Library into a unified front end for workplace storage by adding Dropbox, Box, and Microsoft SharePoint. Paid users can browse permitted files, reference them with @mentions, and analyze folder contents in Chat and ChatGPT Work without creating duplicate uploads.

Source

OpenAI has launched ChatGPT for Financial Services, a finance-focused version of ChatGPT Work that combines GPT-6 Astra with built-in market data, financial analysis, and document generation. The service is aimed at investment-banking and equity-research teams, promising to turn company research and valuation work into firm-ready models, reports, and pitchbooks.

Source

OpenAI has temporarily paused new subscriptions to its $200 Pro plan because demand for GPT-6 Astra is placing exceptional pressure on capacity. The pause affects new sign-ups rather than existing accounts, while other plans and API access remain available as OpenAI works to expand capacity.

Source

OpenAI has released GPT-Live-1 through its API, allowing developers to build applications that listen and speak simultaneously instead of waiting for separate speech-recognition, reasoning, and speech-synthesis stages. The model delivers faster turn-taking, handles interruptions in real time, and costs $0.05 per minute for the voice layer.

Source

Excel administrators are reporting that Microsoft’s KB5002914 security update breaks copy-and-paste, autofill, formula dragging, and in some cases VBA macros. The failure has appeared across Office 2016, 2019, 2021 and newer installations, while removing the update or rolling back the Office build restores the affected functions—but leaves the security fixes absent.

Source

Microsoft has released Windows 11 KB5124010 to the Release Preview channel for versions 24H2 and 25H2, with builds 26100.9539 and 26200.9539. The update adds Emoji 17.0 and several usability improvements, but administrators will pay closest attention to Wi-Fi reuse in WinRE, new recovery management support, and the removal of PC-to-PC Migration from Windows Backup.

Source

Google has launched a native Gemini app worldwide for Windows 10 and Windows 11, giving users instant access through an Alt + Space overlay instead of a browser tab. The client supports both x64 and ARM64 PCs and combines quick assistance with Gemini Spark agents, Google service integrations, and image and video generation.

Source

Microsoft is warning IT administrators not to wait for VBScript removal to disrupt Windows activation automation. Organizations that still rely on `slmgr.vbs` should begin moving critical workflows to PowerShell, using Microsoft’s newer activation module where it is supported.

Source

A new TerminalFix campaign is using counterfeit Cloudflare CAPTCHA pages to trick Windows users into pasting PowerShell commands that ultimately turn infected PCs into network pivot points. Instead of stopping at information theft, the multistage intrusion establishes persistence, maps Active Directory, and deploys an encrypted reverse tunnel capable of reaching internal systems.

Source

Microsoft Defender is now using cross-domain signals to disrupt AI-themed phishing, adversary-in-the-middle (AiTM), and business email compromise attacks—not merely flag them. Microsoft says the system contains more than 81,000 compromised accounts and disrupts over 45,000 AiTM attacks each month; in one case, it stopped an OAuth device-code attack within four minutes.

Source

Azure AI Speech LLM 2607 is Microsoft’s latest large language model update for Azure Speech-to-text, designed to make voice transcription more accurate, responsive, and easier to customize. It improves multilingual and mixed-language transcription without requiring application changes. The service-side update also adds a cleaner phrase-list mechanism for domain vocabulary and is available through the Fast API, Real-Time API, and Foundry Playground.

Source

Microsoft says organizations can reduce AI-assisted CEO impersonation and invoice fraud by combining email security controls with independent payment verification. In a campaign involving more than one million messages, attackers impersonated executives and ServiceNow to request ACH payments of nearly $50,000, using lookalike domains, fabricated invoices, and fake email threads. Microsoft found no evidence that the impersonated companies were compromised.

Source

Apple will release macOS 27 Golden Gate on Monday, September 14, alongside iOS 27, iPadOS 27, watchOS 27, tvOS 27, and visionOS 27. The update adds Siri AI, interface refinements, and performance improvements, but it also marks the end of major macOS upgrades for Intel-based Macs.

Source

OpenAI has added a Data agent to ChatGPT Work that turns natural-language questions into data analysis, interactive dashboards, and recommended actions. The feature is designed to let employees investigate sales, spending, customer, and operational metrics without writing queries or learning a separate analytics platform.

Source

OpenAI and the U.S. General Services Administration have expanded the OneGov agreement to cover federal, state, local, and tribal governments, eliminating ChatGPT’s usual $15-per-user monthly license fee and cutting usage charges by half. The deal also gives verified public-sector cyber defenders discounted access to OpenAI’s Daybreak Blue tools, while a separate Center for Internet Security pilot will test AI-assisted defense across government and critical infrastructure.

Source