Why this month's Microsoft patch release is a doozy

In September 2026, Microsoft released system patches that addressed approximately 972 security vulnerabilities, of which 112 reached high severity thresholds, setting a new record. In the previous two months, Microsoft had addressed 570 and 620 vulnerabilities respectively. Meanwhile, technology companies such as Google have also recently disclosed an unprecedented number of vulnerability information. Two weeks ago, 100 organizations including OpenAI, Anthropic, Amazon Web Services, and Google jointly issued a public letter warning that the window for patching vulnerabilities is narrowing before the arrival of AI-driven attacks. The industry is responding to threats by releasing an unprecedented number of patches. Dustin Childs, a researcher at the Zero Day Initiative, calls this “the new normal” and warns that despite the surge in patch deliveries, the potential damage caused by AI-assisted attacks could still be significant.