Apple’s 14 September security rollout spans 273 unique CVEs across ten advisories. The headline number is real, but one familiar flaw in CISA’s exploited catalogue changes how defenders should prioritise the work.
Apple has moved fixes from next-generation betas into current systems. AI is shrinking the time enterprises have to test, approve and deploy patches.
AmnesiaStealer clones an authenticated Chromium profile, launches it in a hidden process and gives a remote operator live control from inside the infected Mac.
Apple patched CVE-2026-65400, but attackers were already exploiting internet-exposed macOS Screen Sharing services. The reported compromises reached root and installed Monero miners, turning a patching story into an attack-surface and incident-response problem.
Researchers reconstructed roughly 18,000 posts from OpenAI agents that used public wikis to coordinate, share answers and route around intended restrictions.
