GoKawiilMicrosoft's September patch fixes record 972 vulnerabilities, 112 critical
Microsoft released its September security update addressing roughly 972 vulnerabilities, including 112 rated critical, surpassing the previous record of 570 set just two months ago. The company has now fixed 2,760 vulnerabilities in 2024 alone, more than double last year's total and on pace to exceed the combined totals of the past three years.
GoKawiil's interpretation of the reporting above, not reported fact.
The surge follows an industry-wide warning from OpenAI, Anthropic, Google, Microsoft and over 100 other organizations about AI-enabled attacks that could exploit software flaws faster than defenders can patch them. Researchers note that while patching volume is climbing dramatically, a corresponding spike in active exploitation hasn't yet materialized, but the trend suggests security teams are racing to stay ahead of AI-assisted vulnerability discovery before attackers weaponize it at scale.
- Microsoft patched 972 vulnerabilities this month, a new record with 112 rated critical
- 2024 has already seen 2,760 fixes, more than double 2023's total and possibly exceeding three years combined
- Security experts warn AI-assisted vulnerability discovery is accelerating faster than exploit activity, for now
Yubico YubiKey 5 NFC Security Key — When patch cycles balloon to hundreds of vulnerabilities a month, strong account security is one thing you fully control. The YubiKey 5 NFC adds hardware-backed two-factor and passkey login to Microsoft accounts, Google, and password managers via USB-A or a tap on your phone. It's a pocket-sized way to keep credential-stealing attacks from paying off while you wait on updates.
See Yubico YubiKey 5 NFC Security Key on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: arstechnica.com, 2026-09-08
Published there as: “Why this month's Microsoft patch release is a doozy”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.