Microsoft fixes record 972 vulnerabilities as AI-enabled attacks become the new normal
Ars Technica AI · rss · 2026-09-09
Microsoft's September patch release fixes a record 972 vulnerabilities, 112 of them high critical severity — far above the record 570 patched just two months ago. Google and others have also seen record patch counts.
Context: two weeks ago OpenAI, Anthropic, AWS, Google, Microsoft and 100+ organizations signed an open letter warning of a narrowing window to patch bugs ahead of an expected tsunami of AI-enabled attacks that exploit them first.
Zero Day Initiative researcher Dustin Childs calls the spike the "new normal" and cautions AI-assisted attacks could eventually cause substantial damage.
More from Safety
- Ex-DOGE cyber researchers breach Anthropic systems with AI agents in under 12 hours — ScottNover · 2026-10-26
- Ofcom admits UK online safety laws failed to protect children in first review — gnukeith · 2026-10-26
- Sakana AI CEO Calls for Japan-US Shared Framework for AI Capability Evaluation — SakanaAILabs · 2026-10-26
- Gary Marcus backs call to outlaw voice cloning, citing scam and fraud harms over benefits — GaryMarcus · 2026-10-26
- Turing-complete malware can run in PyTorch's backward pass via a zero-valued loss — retr0jirachi · 2026-10-26
- Import AI 478: $135k math autoformalization, ProgramBench hits 18.5%, agents leak via CPU cache — Import AI (Jack Clark) · 2026-10-26