# ShieldCrash zero-day breaks Microsoft's newest patch, AI agents compromise 440 school print servers, Fortinet's 92-day streak ends

Page: https://stenobird.com/podcast/cybersecurity-today-65508/shieldcrash-zero-day-breaks-microsoft-s-newest-patch-ai-agents-compromise-440-school-print-servers-fortinet-s-92-day-streak-ends
Text version: https://stenobird.com/podcast/cybersecurity-today-65508/shieldcrash-zero-day-breaks-microsoft-s-newest-patch-ai-agents-compromise-440-school-print-servers-fortinet-s-92-day-streak-ends.md
Podcast: [Cybersecurity Today](https://stenobird.com/podcast/cybersecurity-today-65508)
Published: 2026-09-11T00:45:00+00:00
Episode link: https://cybersecuritytoday.libsyn.com/shieldcrash-zero-day-breaks-microsofts-newest-patch-ai-agents-compromise-440-school-print-servers-fortinets-92-day-streak-ends
Audio file: https://traffic.libsyn.com/secure/cybersecuritytoday/ShieldCrash_zero-day_breaks_Microsofts_newest_patch_AI_agents_compromise_440_school_print_servers_Fortinets_92-day_streak_ends.mp3?dest-id=679928
Processing state: not_requested
JSON: https://stenobird.com/v1/public/podcasts/cybersecurity-today-65508/episodes/shieldcrash-zero-day-breaks-microsoft-s-newest-patch-ai-agents-compromise-440-school-print-servers-fortinet-s-92-day-streak-ends
Duration seconds: 646

## Resource

Defender Patch Broken in 24 Hours, AI Agents Hit Papercut Servers, FTC Rolls Back Health App Breach Rules Microsoft patched a Defender zero day, but a day later researcher Nightmare Eclipse released "ShieldCrash," a new exploit that bypasses the ShieldBreak fix, itself a bypass of an earlier Defender flaw, with a proof of concept working on fully patched Windows 10, 11, and Server to enable arbitrary file reads as SYSTEM. Researchers also tied recent Papercut print server compromises to a suspected Russian-speaking criminal who used hundreds of AI agents (OpenAI Codex and a DeepSeek model) plus tools like Mimikatz and Impacket to rapidly attack 440 servers across 395 organizations in 48 countries, heavily impacting schools and achieving domain admin in 12 cases. The FTC rescinded a 2021 policy applying breach notification rules to health apps and connected devices. Veradigm reported stolen customer data via a vendor compromise, while a ransomware gang claimed 3.5 million patient records. Fortinet went 92 days without a new critical advisory before disclosing two new critical bugs. Host David Shipley marks the 25th anniversary of 9/11. 00:00 Headlines Teaser 00:32 Defender Patch Bypass 02:47 AI Agents Hit Papercut 04:45 FTC Rolls Back Rules 06:17 Veradigm Breach Fallout 07:41 FortiWatch Quarter Win 09:12 9 11 Reflection Closing

## Actions

- request_transcript: `POST https://stenobird.com/v1/public/podcasts/cybersecurity-today-65508/episodes/shieldcrash-zero-day-breaks-microsoft-s-newest-patch-ai-agents-compromise-440-school-print-servers-fortinet-s-92-day-streak-ends/transcription-requests` — Idempotently request low-priority transcript generation for this episode.
- read_markdown: `GET https://stenobird.com/podcast/cybersecurity-today-65508/shieldcrash-zero-day-breaks-microsoft-s-newest-patch-ai-agents-compromise-440-school-print-servers-fortinet-s-92-day-streak-ends.md` — Read the agent-friendly Markdown representation of this episode resource.

A page view does not enqueue transcription. Agents should invoke `request_transcript` explicitly when they need this episode processed.

## Transcript

Full transcripts are not published on public pages unless there is a clear rights basis.