Microsoft Corp.<\/strong> right now issued updates to plug no less than 974 safety holes in its Home windows<\/strong> working techniques and different software program, by far its greatest single patch batch ever. Microsoft says synthetic intelligence helps to hurry the invention of vulnerabilities, however safety consultants warn that many organizations already are struggling to prioritize the extra human-intensive endeavor of testing and deploying so many fixes every month.<\/p>\n Picture: Shutterstock.com, Kirill Makarov.<\/p>\n<\/div>\n This month\u2019s patch bundle obliterates the software program big\u2019s earlier document set in July<\/a>, when it launched updates for no less than 570 safety vulnerabilities. September\u2019s Patch Tuesday brings this yr\u2019s whole to greater than 2,600, greater than twice Microsoft\u2019s earlier record-setting patch yr in 2020 (1,245) and with three extra months to go.<\/p>\n There are two \u201czero-day\u201d flaws mounted this month which are being actively exploited: each CVE-2026-81963<\/a> and CVE-2026-85880<\/a> permit an attacker to raise their privileges on Home windows system.<\/p>\n Totally 113 of the bugs addressed right now earned Microsoft\u2019s \u201cimportant\u201d score, which means they might be abused by malware or miscreants to grab management over a weak Home windows machine with little or no assist from the person.<\/p>\n Among the many extra critical important flaws this month is CVE-2026-69730<\/a>, a DNS weak point current in Home windows Server 2012 onward and on Home windows 10. Microsoft warns that an unauthenticated attacker might leverage this weak point just by sending a specifically crafted packet to an affected system, and that it’s more likely to be exploited.<\/p>\n Additionally scary is CVE-2026-69829<\/a>, a important, distant code execution flaw within the Home windows Shell. This vulnerability has a CVSS base rating of 9.8 (10 is essentially the most extreme), and could be exploited with low assault complexity, no privileges, and no person interplay.<\/p>\n Microsoft\u2019s abstract of the safety updates launched right now. Picture: msrc.microsoft.com.<\/p>\n<\/div>\n Microsoft is hardly alone in transport monster patch bundles currently. Many different massive software program corporations, together with Adobe, Cisco, Google, Mozilla and Oracle, all have lately credited AI-assisted analysis with growing their patch cadence and quantity (Google mentioned right now it’s now going to ship safety updates each two weeks).<\/p>\n Tyler Reguly<\/strong>, affiliate director of safety analysis and improvement at Fortra<\/strong>, mentioned one core problem with deploying Home windows updates is that they should be examined earlier than being put in throughout a corporation as a result of not all third-party software program works seamlessly within the face of modifications to the underlying working system.<\/p>\n \u201cIt\u2019s time to place our CISOs and CSOs on discover,\u201d Reguly mentioned. \u201cHow are you serving to your groups by way of these tough occasions? Do you’ve your groups deploy after hours and on weekends to keep away from disruption to the enterprise setting? Do you reward them for that effort? Time to dig into your funds and purchase dinner in your groups which are engaged on Saturday to get patches rolled out earlier than customers return to work on Monday.\u201d<\/p>\n Satnam Narang<\/strong> is senior employees analysis engineer at Tenable<\/strong>. Narang mentioned it\u2019s necessary to acknowledge that whereas the variety of vulnerabilities being patched by Microsoft is rising, the variety of flaws that may and can have an effect on most organizations stays fairly low.<\/p>\n \u201cAI-assisted vulnerability discovery in 2026 is creating bigger haystacks, however it isn\u2019t discovering extra needles,\u201d he mentioned. \u201cIt\u2019s important that organizations perceive which vulnerabilities really apply to them, whether or not they pose a risk by being reachable and exploitable, and prioritize remediation based mostly on this danger context.\u201d<\/p>\n In fact, common Home windows customers don\u2019t want to check patches earlier than deploying them, however they nonetheless have to open Home windows Replace periodically or else assent to this system\u2019s nag notices about pending updates. And on the fee these Home windows patch releases are ballooning in measurement, it\u2019s in all probability greatest to not allow them to pile up month after month.<\/p>\n Enterprise Home windows admins will need to keep watch over askwoody.com<\/a> for information of any updates that look like inflicting issues. As at all times, the SANS Web Storm Heart<\/strong> has a per-patch breakdown<\/a> ordered by severity and urgency.<\/p>\n<\/p><\/div>\n\n","protected":false},"excerpt":{"rendered":" Microsoft Corp. right now issued updates to plug no less than 974 safety holes in its Home windows working techniques and different software program, by far its greatest single patch batch ever. Microsoft says synthetic intelligence helps to hurry the invention of vulnerabilities, however safety consultants warn that many organizations already are struggling to prioritize […]<\/p>\n","protected":false},"author":2,"featured_media":18567,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[58],"tags":[10152,262,618,7386,211],"class_list":["post-18565","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cybersecurity","tag-holes","tag-krebs","tag-microsoft","tag-plugs","tag-security"],"_links":{"self":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18565","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=18565"}],"version-history":[{"count":1,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18565\/revisions"}],"predecessor-version":[{"id":18566,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/posts\/18565\/revisions\/18566"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=\/wp\/v2\/media\/18567"}],"wp:attachment":[{"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=18565"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=18565"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/techtrendfeed.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=18565"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"\"](\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2026\/09\/shutterstock_278764853.jpg\")
<\/p>\n![\"\"](\"https:\/\/krebsonsecurity.com\/wp-content\/uploads\/2026\/09\/msrc-sug-sept2026.png\")
<\/p>\n