Microsoft fixes record 972 vulnerabilities as AI-enabled attacks become the new normal

Ars Technica AI · rss · 2026-09-09

Microsoft's September patch release fixes a record 972 vulnerabilities, 112 of them high critical severity — far above the record 570 patched just two months ago. Google and others have also seen record patch counts.

Context: two weeks ago OpenAI, Anthropic, AWS, Google, Microsoft and 100+ organizations signed an open letter warning of a narrowing window to patch bugs ahead of an expected tsunami of AI-enabled attacks that exploit them first.

Zero Day Initiative researcher Dustin Childs calls the spike the "new normal" and cautions AI-assisted attacks could eventually cause substantial damage.

Original post →

More from Safety

Safety channel →