Microsoft released a security patch addressing a record 972 vulnerabilities in September, with 112 designated as critical. This follows previous record-setting patches in the last two months and coincides with growing industry concern over AI-assisted vulnerability exploitation.
Dustin Childs, a researcher at the Zero Day Initiative, noted the unprecedented rate of patching. “Congrats to the security gnomes at Microsoft for being able to patch bugs at this rate,” Childs wrote Tuesday. He also cautioned that the increasing number of vulnerabilities discovered through AI assistance shows no signs of slowing down, and while active exploits haven't spiked yet, the potential for substantial damage remains.
According to Childs’ count, Tuesday’s release addresses 972 vulnerabilities, increasing to 997 when including fixes for the Chromium browser used in Edge. The remaining vulnerabilities are classified as important. So far this year, Microsoft has fixed 2,760 vulnerabilities, more than double the number fixed last year. At the current pace, Microsoft is projected to fix more bugs this year than in all of 2023, 2024, and 2025 combined.
Two weeks ago, Microsoft joined OpenAI, Anthropic, Amazon Web Services, Google, and 100 other companies and organizations in publishing an open letter warning of a shrinking window to patch vulnerabilities before a potential surge of AI-enabled attacks that actively exploit them.
Read the original coverage
💬 Comments
📜 Comment Policy