gg2
extremetech.com

Microsoft Patches a Record 974 Security Flaws in Biggest Update Ever

The gist

Microsoft shipped a record 974 security fixes on September 8, two already exploited.
The surge, driven by AI bug-hunting, is straining the teams who must patch fast.

How it unfolded

  1. Sep 8, 2026Microsoft shipped its largest Patch Tuesday on record, fixing 974 vulnerabilities; two flaws were already being exploited in live attacks before a patch existed. CISA added both to its Known Exploited Vulnerabilities catalog, requiring federal agencies to apply fixes by September 22, 2026.
  2. Sep 9, 2026Multiple outlets reported the record 974 CVEs, including 2 zero-days and 20 wormable bugs; SC Media noted the update brought Microsoft's 2026 total to more than 2,600 vulnerabilities.
  3. Sep 10, 2026ExtremeTech confirmed the record-breaking 974 fixes, and a researcher published a working exploit within hours of release that sidesteps one of the fixes entirely.

Sources

Read the full story in the app gg2 — free on the App Store