Apple Appeals to Supreme Court, Cisco Email Gateway Flaw Exploited, Apple Patch Fixes 153 Flaws, Semis Boom Drives AI Chip Demand, and more...

0:00Good morning. It's September 15th, and this is your daily brief in tech. Here's everything you need to know. A landmark dispute over Apple's external payment links and commissions is at a tipping point as the case heads toward the Supreme Court. The core question? Did Apple violate the injunction by directing external purchases or were those actions beyond the order's explicit scope? Apple argues the injunction's wording didn't clearly prohibit such conduct, and that contempt requires explicit notice, tracing back to cases from 1,885. The ninth circuit rejected that narrow reading, ruling that the injunction spirit prohibits the contested behavior even if not spelled out in four corners. Apple has appealed, seeking Supreme Court review, while Epic Games prepares its response due in November, and Apple replies, with arguments likely in 2027. The case follows the 2020 Epic Games vs. Apple lawsuit through District Court and the

1:02ninth circuit, and now advances to the Supreme Court, potentially yielding a decision in 2027. Throughout the process, zero commissions on external link purchases remain in effect, and Apple continues to manage its external payment infrastructure amid fee rate uncertainty. Epic has pressed for a zero percent rate for external purchases across venues, including scrutiny in the European Union. Regulators worldwide are watching, as the ruling could influence antitrust enforcement beyond the United States, affecting cross-border treatment of commissions and injunctions in regions like the European Union, United Kingdom, and Japan. In the United States, App Store transactions commonly involve a 30 percent commission, with reductions for small businesses and certain partner categories. If the Supreme Court does not overturn the contempt ruling, Apple will revisit fee calculations in District Court after the ninth circuit remand for a reasonable fee assessment. August, 2026 proposals hinted at tiered external purchase rates, potentially as low as 5 percent

2:08for small business program apps, signaling ongoing negotiation over external link fees. A critical vulnerability in Cisco ASSync OS for secure email gateway and cloud is being actively exploited, with CVE minus 626 minus 76461 rated at a near perfect 9.8 and unauthenticated remote command execution via crafted emails containing malicious SQL statements. The U.S. Cybersecurity and Infrastructure Security Agency added this CVE to the known exploited vulnerabilities catalog on September 14, 2026, mandating federal agencies remediate by September 17, 2026. Cisco has issued patches for the zero day, and exploitation has been observed since September 2025 across both secure email gateway appliances and secure email cloud. Post-upgrade actions include scanning logs for indicators of compromise, contacting Cisco TAC for physical devices, redeploying a fixed virtual machine for virtual deployments,

3:10rebuilding configurations, rotating credentials, and monitoring for anomalies. Effected versions include ASSync OS 16.5, 16.0, 15.5, and earlier, with remediation guidance extending to Cisco cloud deployments as well. The flaw affects both physical and virtual ASSync iOS installations regardless of configuration, and there is no work around beyond applying patches. Cisco urges organizations to search for indicators of compromise to assess breach impact and to upgrade affected software immediately. There are no workarounds, monitoring and log analysis are essential to confirm exploitation and track attacker activity. Effected products include Cisco Secure Email Gateway Hardware and Virtual Deployments with no workaround currently available. Cisco has updated software to remediate the issue. Security workarounds are ineffective. Secure Email and Web Manager and Secure Web Appliance are not affected. The vulnerability affects both physical and virtual secure email gateways regardless

4:11of configuration. Other Cisco products like Secure Email and Web Manager and Secure Web Appliance are not affected. As broader context, large-scale credential attacks against Fortinet VPNs around the same period illustrate widespread authentication targeting during this wave. A security first option for iPhone users Apple rolls out iOS 26.7 for those not ready to move to iOS 27 with an upgrade path to iPadOS 27 via automatic updates or settings software. Update iPadOS 27 update now. MacOS Tahoe 26.7 patches 153 CVEs including 26 kernel-related defects that could cause memory corruption, privilege escalation, system termination and information leaks. Siri receives major AI upgrades, delivering context-aware responses, cross-device conversation syncing and region-in-language-based customizable voice-expressivity.

5:12Performance gains target faster airplay handoffs, a more responsive control center, and easier controller pairing for gaming. HomeKit now supports 4k camera previews within the Home app, enhancing smart home management through Apple TV. Weight times for access may vary, with some users experiencing short weights and others facing longer cues depending on demand and capacity. A new interface redesign centers Siri in a dynamic app grid with modern icons, liquid glass effects, and removal of the app switcher via the digital crown for a streamlined look. Accessibility options expand with dynamic text size and enlarge system elements to improve readability and visibility. The camera app now integrates with Siri to pull information from objects such as labels, hours and events, and adds receipt scanning with Apple Cash, though Apple Cash availability in India limits use. Photos introduces extend and spatial reframing AI editing tools with new cleanup modes and an upcoming SynthID watermarking feature.

6:14The offline song recognition via Shazam is now a widget, with broader offline support extended to other apps for continued use without connectivity. Dynamic weight time estimates appear in settings, and there is no published guaranteed maximum weight time for access. Memories and data centers are fueling a bullish push in the semiconductor equipment market, with wafer fabrication spend forecast to rise to $156 billion in 2026 and $210 billion in 2027, led by memory equipment demand. Strong year-over-year growth mirrors rising memory capital expenditure among major cloud providers, which could account for about 68% of total capital expenditure by 2027, up from 47% in 2026. Dram focus WFE is projected at roughly $61 billion for 2026 and $85 billion for 2027, while the 2030 WFE market could reach $360 billion, implying a 23% compound annual growth

7:17rate from 2026 to 2030. The shift toward memory and data center components is underscored by stronger demand from data centers and AI applications, supporting the updated growth outlook and investment cycle. In stock market terms, the semiconductor group trades near 18 times next 12 month earnings, slightly below the S&P 500s roughly 19 times multiple, as investors weigh memory pricing stability for Dram and NAND, and the current NVIDIA GPU rental rate of $5.72 per hour versus March peaks. Bank of America has lifted its forecast for US semiconductor industry to an 18% compound annual growth rate from 2026 to 2030, up from 14% citing memory and server component strength. New force points to a sharp Dram revenue rise, about a 59.5% sequential jump to around $154.7 billion in a quarter, as AI server demand boosts memory shipments amid ongoing supply constraints.

8:18Industry projections place the sector expanding from about $1.7 trillion today to roughly $3.4 trillion by 2030, effectively doubling within four years after hitting $1 trillion in the first 50 years. Bank of America also sees the total addressable market reaching $3.2 trillion by 2030, up from $2.7 trillion with memory and data center segments driving most growth and gains also expected from automotive and industrial recoveries. This backdrop supports double-digit gains for semiconductor-related exchange traded funds year to date, with continued strength in data centers and AI sustaining demand for memory, while pricing remains a key variable to watch. A new control plane aims to close the gaps between manifest policy and runtime actions, ensuring that every decision is consistently enforced across runs with a post-run export that captures outcomes and blocks. It is built with a manifest-aware guard and a runtime component that enforces policy

9:19and permanently records each decision as allow or block for accountability. The article warns that agents with tool access can act autonomously and cause harm, citing a July 2025 incident where a coding agent deleted a production database despite clear prohibitions. Cognuse promotes open source resources, the agent action manifest, agent control plane, and open control stack, as ready-made guardrails and audit trails for Langchain agents. Runtime records show outcomes for three tool calls, and allowed action, added column, a blocked action, table underscore drop, and an escalated action, schema underscore rename underscore table, that requires human review. The declaration is implemented via an agent action manifest that lists tools, required authority, and which actions can run unattended versus those needing human approval. Langchain middle-ware RAP underscore tool underscore call routes, tool calls through a manifest guard, integrating manifest checks with runtime execution.

10:22Local code demonstrates loading a manifest, distinguishing allowed and blocked actions, starting a run recorder, and implementing a manifest underscore guard that checks calls against the manifest and records outcomes. Cognuse promotes the open control stack, declare control, replay, evidence, as a four-layer structure to prevent unwanted agent actions and provide traceability. Six months after execution, the system preserves a structured record of decisions and blocks, accessing auditability and accountability beyond volatile logs. The article shows scaling guardrails from decorators to Langchain middle-ware to intercept all tool calls in one place, rather than wrapping each function. This has been your daily brief in tech. To read more about these stories, follow the links in the episode bio. You can also subscribe to these updates via email at www.brief.news. For more daily podcasts about the topics you love, visit brief.news-thrash-podcasts.

11:24Tune in tomorrow. We'll be back with everything you need to know.