Updated
Updated · The Verge · Sep 8
Microsoft Ships 972 Security Fixes in Record September Patch as AI Accelerates Bug Discovery
Updated
Updated · The Verge · Sep 8

Microsoft Ships 972 Security Fixes in Record September Patch as AI Accelerates Bug Discovery

3 articles · Updated · The Verge · Sep 8

Summary

  • 972 vulnerabilities were fixed in Microsoft’s September security release, a record patch batch that included 112 critical flaws and two zero-days.
  • More than 650 of those fixes were for Windows alone, far above Microsoft’s usual roughly 100 monthly patches after AI models sharply increased vulnerability discovery.
  • June brought about 200 fixes, July at least 570, and August nearly 400, showing a rapid summer escalation tied to security-focused models from Anthropic and OpenAI.
  • Businesses now face heavier pressure to test and deploy updates quickly because the larger patch load widens the patch gap while AI can turn newly disclosed flaws into working exploits within hours.

Insights

With AI unearthing a record number of software flaws, are we rapidly approaching the end of the traditional monthly patch cycle?
If AI finds thousands of vulnerabilities that attackers aren't exploiting yet, are defenders wasting resources patching the wrong threats?
What happens when the security tools designed to protect your enterprise harbor an unpatched zero-day vulnerability themselves?