The Coeus Chronicle: Volume 1, Issue 9 (September 2026)
September is about speed. Researchers believe attackers reverse engineered public Chromium fixes before the patches reached Chrome users, and Anthropic research showed an AI model can turn a security patch into a working browser exploit in under an hour. Meanwhile, most small businesses already automate routine work, and Gartner predicts 80% of new applications will be disposable by 2029 as AI makes software cheap to build. This month, we look at what that pace means for growing businesses.
The Omen
Signals of Change
AI Can Turn a Patch Into a Weapon in Under an Hour
A recent China-linked attack used a link hosted on a legitimate U.S. university website to compromise vulnerable Windows PCs running Chrome. One click triggered a chain of Chrome and Windows exploits that escaped the browser sandbox, elevated privileges, and installed malware, effectively giving the attacker control of the PC.
Researchers believe the attackers reverse-engineered publicly visible Chromium fixes before those patches reached stable Chrome users. Separate Anthropic research showed a frontier AI model could take a security patch and vulnerable software and produce a working browser exploit in under one hour.
Coeus Perspective: A security patch can now start a race between defenders deploying the fix and attackers using AI to turn it into a working exploit, significantly shrinking the window businesses have to patch.
Coeus Insight: Treat browser and operating-system updates as time-sensitive security controls, with automatic or tightly managed deployment wherever practical.
Sources: Volexity, Mind the (Patch) Gap | Anthropic, Measuring LLMs’ Impact on N-day Exploits
The Proven Path
Strategies for Today
Automate the Gaps Between Your Tools
Small businesses are increasingly using automation to reduce routine work. A 2026 SMB study found that 69% use at least one form of automation, with billing, invoicing, payments, marketing, and scheduling among the most common targets.
Coeus Perspective: The best automation often happens between applications, where employees otherwise re-enter data, chase approvals, or move information manually. That makes API access, webhooks, usable exports, or other supported back-end access increasingly important when selecting software.
Coeus Insight: Favor vendors that provide practical access to your own data through APIs, webhooks, exports, or other supported methods, because restricting that access limits automation today and can make changing vendors much harder tomorrow.
Source: inTandem, 2026 Small Business Digital Adoption Report
The Horizon
Preparing for Tomorrow
AI Can Skip the Developer. It Can't Skip Compliance.
Gartner predicts that by 2029, 80% of new applications will be intentionally disposable and used for less than a year as AI makes it easier for employees to create their own software. But compliance requirements do not disappear just because an app was built with a prompt instead of a development team.
NIST and OWASP guidance points toward a clear expectation: AI-generated code still needs human ownership, review, security testing, and documented approval before production use. That matters because Veracode found known security vulnerabilities in about 44% of AI-generated coding tasks in its 2026 testing.
Coeus Perspective: Vibe coding can turn almost anyone into a software creator, but regulated businesses still need to know what applications exist, what data they touch, who approved them, and whether a qualified human reviewed the code before deployment.
Coeus Insight: Treat AI-built applications like any other production software once they handle business or regulated data: inventory them, assign a human owner, require human code review, run security testing, and document approval before deployment.
Sources: Gartner | NIST | OWASP | Veracode
The Agora
Meet Coeus
Meet Us This December
Coeus will be at two December events connecting us with the industries we serve and the managed IT community.
DEC 9-10 Phoenix Build Expo
Phoenix Convention Center, Phoenix. Coeus will be exhibiting at the Phoenix Build Expo. Stop by our booth to talk IT and construction, from field connectivity and cybersecurity to cloud, compliance, and the technology challenges affecting your projects.
DEC 9 MSP Titans of the Industry Awards Gala
The Beverly Hilton, Beverly Hills. Coeus has been named an MSP Titans of the Industry finalist for the second year in a row, and we’ll be attending the December awards gala.
About the Author
Linus Malefors
Managing Director, Coeus Consulting
Linus Malefors is an accredited technology consultant with over 30 years of experience serving Phoenix small and mid-sized businesses. He has supported more than 1,000 organizations throughout his career, and his leadership at Coeus Consulting has earned him two MSP Titans of the Industry finalist honors and a place among the 2026 AZ Champions of Change finalists. His technology expertise spans cybersecurity, cloud, AI, infrastructure, and regulatory compliance.