GoKawiilMicrosoft ships record 974 security fixes in September Patch Tuesday
Microsoft released patches for 974 vulnerabilities across Windows and other products, its largest single update batch ever, surpassing July's record of 570 fixes. The release includes two actively exploited zero-day flaws that let attackers escalate privileges, plus 113 critical-rated bugs including a dangerous DNS weakness and a Windows Shell remote code execution flaw scoring 9.8 out of 10 in severity.
GoKawiil's interpretation of the reporting above, not reported fact.
Microsoft says AI tools are accelerating vulnerability discovery, but this is creating a bottleneck: security teams still must manually test and deploy fixes, and the sheer volume makes prioritization difficult for many organizations. With 2026 already showing over 2,600 patched vulnerabilities and months remaining, this pattern—also seen at Adobe, Cisco, Google and others—suggests AI-assisted bug hunting is outpacing the human capacity to safely roll out fixes.
- Microsoft patched 974 vulnerabilities this month, its biggest release ever, more than double July's previous record.
- Two zero-days already under active attack allow privilege escalation on Windows systems.
- AI is speeding vulnerability discovery industry-wide, but organizations are struggling to keep pace with testing and deployment.
Samsung T7 Portable SSD — Before you unleash a record-breaking pile of Windows patches, make a full backup — updates this large occasionally break things, and a rollback is only possible if you saved your data first. The Samsung T7 is a compact, bus-powered USB-C drive that makes imaging your PC or copying key files quick and painless, and it slips in a pocket for offsite storage.
See Samsung T7 Portable SSD on Amazon → Affiliate link — we may earn a commission on purchases, at no extra cost to you. Product picked by AI based on this article; it is not a tested recommendation.Source: krebsonsecurity.com, 2026-09-08
Published there as: “Microsoft Plugs Nearly 1,000 Security Holes”
Read the original report → The summary and analysis above are GoKawiil's own, written from reporting by the source above. Facts and quotes belong to the original publisher.