Sep 11 security update KB4036108 does look like a major issue for Exchange 2013 and Exchange 2016 servers. Its safer to wait until next CU update than to apply it and get screwed. My company recently decided that it will be a really good idea to apply the patches the minute Microsoft releases them, without doing any homework and checking on the Internet to see if other admins ran into any issues. I;m really glad that i managed to convince the upper management and do diligence first before patching. Anyhow for more details regarding this fiasco see this link
https://social.technet.microsoft.com/Forums/en-US/5e6badad-6f5b-4f98-bd80-aa38eebfe0dd/kb4036108-patch-fails-the-term-stopsetupservice-is-not-recognized?forum=Exch2016SD
thanks Microsoft