Microsoft has released its September security update, fixing a record 972 vulnerabilities within its software portfolio. Of these flaws, 112 are classified as critical, representing a significant increase from the 570 vulnerabilities patched just two months prior. This surge follows a coordinated industry alert issued two weeks ago by major tech firms including OpenAI, Anthropic, Amazon Web Services, and Google. Those entities warned of a narrowing window for patching code ahead of an expected wave of AI-enabled attacks designed to exploit unpatched systems immediately.
The spike in reported bugs signals that security teams are finally identifying vulnerabilities at a rate that matches the speed of modern discovery tools. Dustin Childs from the Zero Day Initiative describes this escalation as the new normal, noting that the volume alone does not guarantee safety. Despite the high number of fixes, the potential damage from automated attacks remains substantial because the time between discovery and exploitation has shrunk dangerously. The industry response involves pumping out unprecedented numbers of patches, yet the underlying threat landscape continues to tighten.
- 112 of the 972 fixes carry critical severity ratings
- The previous monthly record stood at 570 vulnerabilities
- Multiple AI companies warned of imminent automated exploits
