Security Signal Weekly: September 5-11, 2026

OverviewThis week did not leave much room for leisurely patch testing. Attackers are already chaining MikroTik RouterOS flaws to take over internet-exposed routers, Microsoft fixed two Windows privilege-escalation bugs under active exploitation, Google shipped another Chrome zero-day update, and Cisco confirmed that a root-level FMC authentication bypass has been used in attacks. The practical priority is the same across all four: identify every affected system, deploy the fix, and investigate what happened before the update landed.The rest of the list is a reminder that high-trust infrastructure deserves the same attention even when exploitation has not been reported. Check Point VPN gateways, cPanel hosts, SAP systems, and GoAnywhere MFT all received consequential fixes. AdaptHealth’s breach update and the federal AI-distillation advisory then bring the week back to identity and monitoring: trusted sessions and legitimate API access can still be the path an attacker uses.Reality…