Microsoft's September Patch Tuesday to top 650 Windows fixes, shattering previous records

Microsoft plans to issue a September Patch Tuesday that includes over 650 security patches for Windows, a figure six times higher than the usual monthly count. The surge began after AI models such as Anthropic’s Mythos and OpenAI’s cybersecurity-focused system started identifying flaws across operating systems and browsers. June’s patch cycle set a new benchmark with about 200 fixes, July’s rose to at least 570, and August’s addressed close to 400 vulnerabilities.

Engineers have been busy validating fixes for remote-code execution, privilege escalation and other critical issues. While the volume of patches improves security, it also creates pressure on IT teams to test and deploy updates quickly, widening the “patch gap” between disclosure and remediation. Microsoft warns that the rapid discovery of flaws in the AI era makes timely patching essential for businesses.