The CIO Authority — The Numbers: Wednesday, September 16, 2026

From The CIO Authority · 00:15:27

Show by The CIO Authority

The CIO Authority — The Numbers: Wednesday, September 16, 2026 🕵️ Iranian state hackers are running a sophisticated social-engineering campaign to plant "Chosen Brick" spyware on Windows devices. The FBI, UK's NCSC, and the Netherlands' AIVD jointly warned that Iranian operatives are messaging targets via WhatsApp and Telegram, posing as trusted contacts, and convincing them to open files disguised as legitimate apps like Telegram, Norton Antivirus, and KeePass. Once opened, the malware survives reboots, evades Microsoft Defender, and steals contacts, emails, and messages — used primarily to track dissidents, activists, and journalists. Notably, this targets personal devices too, not just corporate ones, so it's worth a reminder to your team beyond just the managed fleet. Source: The Register, by Jessica Lyons → https://www.theregister.com/security/2026/09/15/iranian-spies-hit-windows-machines-with-chosen-brick-data-stealing-malware/5296646 💻 Microsoft has scheduled a Windows and Surface hardware event for October 7 in San Francisco. Worth a placeholder on your radar for whatever gets announced — likely relevant to device refresh planning depending on what ships. Source: The Verge → https://www.theverge.com/news/994714/microsoft-windows-surface-event-october-7-san-francisco Today's Numbers segment: Patch Compliance Rate — and this week gave us a live case study. 🔧 Microsoft's record-breaking September Patch Tuesday — nearly 1,000 CVEs patched at once — needed its own emergency out-of-band fix days later. The update broke Remote Desktop Services (causing RDP connections to fail and servers to hang), disrupted Hyper-V host folder shares for Linux VMs, and silenced some USB audio devices. Microsoft fixed RDS and Hyper-V; USB audio is still a known, unresolved issue for some devices. Source: The Register, by Richard Speed → https://www.theregister.com/on-prem/2026/09/15/septembers-windows-11-patch-needs-an-emergency-patch-of-its-own/5296567 🔧 Dark Reading's Rob Wright dug into why: with patch volumes this large, testing every possible enterprise configuration before release is becoming nearly impossible. SOCRadar's CISO Ensar Seker points to the growing complexity of interconnected systems — more dependencies mean a bigger, harder-to-reproduce testing matrix. Fortra's Tyler Reguly adds that there's no external body validating vendor patches before they ship, which is exactly why organizations can't skip their own testing step no matter how urgent a patch feels. Source: Dark Reading, by Rob Wright → https://www.darkreading.com/application-security/microsoft-emergency-fixes-patch-tuesday Why this matters for your Patch Compliance Rate: the honest tension in this metric isn't just "patch fast" — it's balancing patch velocity against patch reliability. A high compliance rate achieved by pushing everything straight to production, unstaged and untested, can create as much operational risk as a slow rate does security risk. Today's segment walks through calculating compliance rate, setting a realistic SLA by severity tier, and why staged deployment rings matter more than ever as patch volumes keep climbing. For general informational purposes only — not professional, legal, financial, or IT/cybersecurity consulting advice. Opinions are the host's own, not any employer's. News referenced above is credited to its original source; all trademarks and copyrighted material belong to their respective owners.

More episodes of The CIO Authority

More episodes

PodSearch is a free, independent podcast search engine. Read about PodSearch, the privacy policy or contact us.