Microsoft Issues Record 972 Security Patches for September

Microsoft is preparing to release a massive security update for September 2026, addressing an unprecedented 972 vulnerabilities. This release includes 112 flaws classified as high or critical severity, marking a significant escalation in the volume of security fixes required for Windows users.

This surge follows a rapid upward trend in vulnerability disclosures. Microsoft addressed approximately 570 vulnerabilities two months ago and roughly 620 last month. Similar record numbers have been observed in disclosures from other major technology providers, including Google.

The increased frequency of these patches is largely attributed to the rise of AI-powered vulnerability discovery. While artificial intelligence is currently assisting defenders by identifying software weaknesses more efficiently, it is also expected to accelerate the threat landscape. Industry leaders, including OpenAI, Anthropic, and Amazon Web Services, recently issued a joint warning regarding a “narrowing window” for patching vulnerabilities.

The primary concern is that AI can be used to rapidly reverse-engineer exploits from security patches. This capability allows attackers to weaponise vulnerabilities almost as soon as an update is published, leaving organisations with very little time to secure their systems. This trend follows other significant security challenges involving Microsoft products.

Given the speed at which AI-driven attacks may be launched following a patch release, security experts advise that the window for remediation has effectively shrunk to “immediately.” Organisations are encouraged to deploy the September updates as soon as they become available to mitigate the risk of rapid exploitation.