It's More Secure When It's Disabled - PSW #943
SC Media, Thursday, September 10th, 2026
Paul's Security Weekly covers a record Microsoft patch month, suspected commissary freezer hacks, Defender bypasses, and GPU Rowhammer.
This Paul's Security Weekly news segment reviews Microsoft's September patch release, a record of roughly 972 vulnerabilities including 112 critical, two exploited zero-days, and 20+ potentially wormable bugs, linked to AI-assisted bug discovery.
Hosts discuss simultaneous freezer failures at U.S. military commissaries, where networked refrigeration controls raise questions of a possible cyberattack without proof of one.
Other stories include the defendnot technique that abuses the Windows Security Center API to push Defender into passive mode, Rowhammer attacks on GPUs, mandatory BIOS updates, CVSS limitations, kworker-disguised malware, and a FortiGate post-exploitation RAT.