Microsoft patches record 974 flaws in one month, 10x last September, credits AI-assisted research
jonerp · x · 2026-09-14
Microsoft's September 2026 Patch Tuesday fixed a record 974 vulnerabilities — over 10x last September's 86 — rising to 999 if you count 25 non-Microsoft CVEs with Microsoft fixes. The Windows family accounts for 723, with Windows 11 24H2/25H2 alone receiving 611 fixes.
Microsoft credits AI tools and more efficient researchers for the surge in vulnerability reports and now recommends deploying critical updates within three days. Remote code execution risks in Exchange Server, Remote Desktop Services, DNS, DHCP, and SMB are flagged as top patching priorities.
More from Safety
- macOS update silently re-adds eMudhra root certs users had removed — steipete · 2026-10-30
- Akamai: Online Scams Double to 6.4M, Overtake Phishing as Attack Windows Shrink to 22 Days — shashib · 2026-10-30
- Anthropic paper: 0.1% pretraining poison plants RCE backdoor in 4B CLI agent — omarsar0 · 2026-10-30
- Cryptographer Matthew Green slams Anthropic's 'model escape' framing of agent worm research — matthew_d_green · 2026-10-30
- Pope Leo calls to 'disarm' AI and urges UN to ban lethal autonomous weapons — The Verge AI · 2026-10-30
- 100 open-source AI security tools challenge kicks off with DirectGuard, a sub-ms prompt injection guard — Venom943 · 2026-10-30