Microsoft breaks another patch Tuesday record

Microsoft breaks another patch Tuesday record. TechMicrosoftNotepadMicrosoft breaks another patch Tuesday recordWindows and security engineers have had a busy summer.

What happened

Sources tell me that Microsoft will set another patch Tuesday record today, the third in just a few months. Sources familiar with Microsoft’s security work tell me both of these models have contributed to a record-breaking series of patch Tuesdays over the summer period. July’s patch Tuesday was even bigger, with Microsoft patching at least 570 security holes, almost triple the number of June’s record-breaking release. While today’s patch Tuesday is another record-breaking event, I wouldn’t be surprised to see this record broken again — particularly if there’s another model advance soon.

Microsoft typically patches around 100 flaws every month, but in June it set a new record of around 200 fixes. I understand today’s September patch Tuesday is about to set a new record, with more than 650 security fixes for Windows alone. As Microsoft uses more and more security-focused AI models to discover software vulnerabilities, the number of flaws that need patching keeps increasing.

The wider picture

While Microsoft is issuing an unusual number of fixes, the sheer amount is also putting pressure on businesses that rely on Microsoft’s software to apply the patches as soon as possible. IT admins typically have to test patches from Microsoft to ensure any fixes don’t interfere with critical business applications. The patch gap has always been a risk in cybersecurity, but with the sheer volume of vulnerabilities being discovered in the AI era, I’m sure we’ll see Microsoft and others warning companies once again to apply patches as soon as they’re released.

Engineers at Microsoft typically enjoy a quieter summer to take vacations and spend time with family, as is common at many companies. But this year, the season has been unusually busy for Windows and security engineers, thanks to new AI models that are discovering software vulnerabilities at a rapid pace. Sources tell me that Microsoft […] Windows and security engineers have had a busy summer. by Tom WarrenSep 8, 2026, 2:00 PM UTCImage: Cath Virginia / The VergeTom Warren is a senior correspondent and author of Notepad, who has been covering all things Microsoft, PC, and tech for over 20 years.

Engineers at Microsoft typically enjoy a quieter summer to take vacations and spend time with family, as is common at many companies. Microsoft engineers had a chance to catch their breath a bit in August when they plugged nearly 400 security vulnerabilities. That’s six times the number that usually got patched before the AI models arrived.

What has been reported

Engineers have been busy over the summer verifying fixes for hundreds of important patches, which include remote code vulnerabilities, privilege escalations, and more. Like many other software companies, Microsoft is urgently hunting for vulnerabilities before the advances in AI let malicious actors exploit undiscovered weaknesses in Windows, Azure, and other software. This process can create what’s called a “patch gap” between a vulnerability being disclosed and people applying the fix. In an AI era of security vulnerabilities being rapidly discovered and disclosed, there’s a huge amount of pressure on businesses to close the patch gap.

This puts businesses at risk of being hit by an exploit if they don’t patch soon enough. It’s particularly risky if Microsoft discovers remote code vulnerabilities that are easy for hackers to exploit. Forza Horizon 6 isn’t racing onto the PS5 this yearMicrosoft is planning to delay the release of Forza Horizon 6 on PS5, according to sources familiar with Playground Games’ plans. Forza Horizon 6 has been hugely popular on Xbox and PC, and the previous instalment of the series, Forza Horizon 5, proved popular on PS5, after Microsoft released it on Sony’s console last year.

What happens next

The padMicrosoft is enabling a Windows 11 security feature that can hurt gaming performance. Microsoft is getting ready to roll out its memory integrity security feature for Windows 11 to more devices next month. Microsoft won’t automatically enable memory integrity again next month if you’ve already previously disabled the feature. Microsoft is turning off text predictions in Word and Outlook. It turns out that a lot of people hate text predictions in Word and Outlook, so Microsoft is turning them off by default.

The feature was supposed to help you write documents and emails faster by guessing what word you’d type next, but Microsoft’s predictive text could often be more of a distraction. Microsoft discloses Azure revenue as part of major financial reporting changes.