Microsoft Plugs Nearly 1k Security Holes (krebsonsecurity.com)

Microsoft has announced its largest-ever security update, addressing 974 vulnerabilities across its Windows operating systems and software. This September's Patch Tuesday has set a new record, surpassing the previous high of 570 updates in July and bringing the total for the year to over 2,600. Among these vulnerabilities, 113 are rated as critical, posing significant risks of malware exploitation, particularly a DNS flaw (CVE-2026-69730) and a severe remote code execution issue (CVE-2026-69829) in Windows Shell, with a CVSS score of 9.8. The substantial number of fixes underscores the growing role of artificial intelligence in enhancing vulnerability detection across the software industry, as similarly large patch bundles are reported by companies like Google and Adobe. However, security experts warn that the rapid increase in vulnerabilities complicates the process for organizations to prioritize and test these updates before deployment. The significant workload demands prompt discussions on resource allocation and support for security teams, emphasizing the need for organizations to focus on relevant vulnerabilities that pose executable threats while ensuring timely updates to protect their systems.