Home / Technology / Microsoft Patches Record 972 Vulnerabilities Amid AI Threat
Microsoft Patches Record 972 Vulnerabilities Amid AI Threat
9 Sep
Summary
- Microsoft fixed 972 vulnerabilities in its September patch, including 112 critical ones.
- Two zero-day vulnerabilities were patched, with their exploitation status unknown.
- AI-assisted vulnerability discovery is expected to accelerate attacks.
Microsoft's September security update is notable for fixing an unprecedented 972 vulnerabilities, with 112 classified as critical. This follows a trend of record-breaking vulnerability disclosures across the tech industry in recent months. Researchers are calling this surge the "new normal," driven partly by the increasing sophistication of AI in discovering software flaws.
This massive patch release addresses significant security concerns, including two zero-day vulnerabilities within the Windows update service and Windows Advanced Local Procedure. Other critical issues patched affect Exchange Server, Microsoft Authenticator, Microsoft Office SharePoint, SQL Server, and Remote Desktop Services, some allowing for remote code execution and privilege escalation. The potential for wormable vulnerabilities, which can spread automatically between machines, is also a growing concern.
Industry leaders are taking the threat of AI-enhanced cyberattacks seriously, as highlighted by a recent open letter warning of an impending "tsunami" of such exploits. While AI is proving effective in finding a high volume of severe bugs, the long-term implications and the true effectiveness of AI-assisted vulnerability hunting are still under evaluation. The current trend suggests a significant and ongoing shift in the cybersecurity landscape.
