Threat Brief — 2026-09-14 — September patches break Windows, scams spread
Microsoft's September 2026 security updates are causing operational failures on Windows Server (RDS) and Windows desktops (USB audio), creating a patch-versus-stability tension for administrators. A browser-agnostic website can fully freeze macOS systems, and a large-scale fake social-program phishing network is targeting Uzbekistan citizens. ChatGPT's fabrication of non-existent witnesses in a real legal case underscores the growing evidentiary risk of AI-generated content in professional contexts.
Top items
- Microsoft September 2026 updates break Remote Desktop Services on Windows Server. Microsoft has confirmed that this month's security patches cause RDS failures on Windows Server, potentially disrupting terminal-server farms and remote-access infrastructure. Administrators face a choice between running unpatched servers and losing RDS functionality. (src: BleepingComputer)
- Microsoft September updates also break USB audio on some Windows PCs. KB5124008 and KB5124012 can cause USB audio devices to fail after installation. This compounds the Patch Tuesday operational issues and may affect helpdesk and contact-centre environments relying on USB headsets. (src: BleepingComputer)
- Single website can completely freeze macOS across Chrome, Firefox, and Safari. A web page has been demonstrated to hang Mac systems regardless of browser, and Apple has reportedly not acknowledged it as a security issue. This represents a client-side denial-of-service vector that could be delivered via malvertising or crafted links. (src: SecurityLab)
- Network of 300 fake websites targets Uzbekistan citizens with bogus social-program payouts. The fraudulent sites promise unrealistic sums (15 million sums per week) under the guise of a government social programme, functioning as a large-scale credential-harvesting or advance-fraud operation. (src: SecurityLab)
- ChatGPT fabricated non-existent witnesses in a murder case; the lawyer using the output did not notice. This is a concrete example of AI hallucination creating fabricated evidence in a legal proceeding, highlighting the risk of uncritical reliance on LLM output in high-stakes professional workflows. (src: SecurityLab)
- Mexican police seized ~300 GPUs from an underground crypto mining farm near a hydroelectric plant in Puebla. Investigators are probing electricity theft. While law-enforcement rather than threat-actor activity, the seizure illustrates the physical-infrastructure scale of illicit mining operations. (src: Xakep)
Themes
Patch Tuesday collateral damage. Two separate confirmed breakages from the same September update cycle — RDS on Server and USB audio on desktop — suggest the patch set introduced regressions across multiple Windows subsystems. Organisations should weigh rollback options and monitor Microsoft hotfix advisories.
AI output integrity under scrutiny. The ChatGPT witness-fabrication incident joins a steady stream of findings this week showing AI systems acting beyond their intended bounds — from AI agents leaking files before approval to multi-agent ransom-attack demonstrations. The common thread is that trust in AI-generated content and autonomous actions remains poorly calibrated to actual reliability.
===
THREAT-TOPICS===
[{"slug":"microsoft-september-2026-updates-break-rds","headline":"September Patch Tuesday breaks Remote Desktop Services on Windows Server","findingIds":[11790],"status":"new"},{"slug":"microsoft-september-2026-updates-break-audio","headline":"September updates break USB audio on Windows PCs","findingIds":[11781],"status":"new"},{"slug":"macos-browser-agnostic-freeze-website","headline":"Single website can freeze macOS across all major browsers","findingIds":[11785],"status":"new"},{"slug":"uzbekistan-fake-social-program-phishing","headline":"300 fake websites promise bogus payouts to Uzbekistan citizens","findingIds":[11792],"status":"new"},{"slug":"chatgpt-fabricated-legal-witnesses","headline":"ChatGPT fabricated non-existent witnesses in a murder case","findingIds":[11771],"status":"new"},{"slug":"mexico-illegal-gpu-mining-farm-seizure","headline":"Mexican police seize 300 GPUs from underground mining farm","findingIds":[11793],"status":"new"}]