Microsoft Plugs Nearly 1,000 Security Holes

Microsoft has released its largest-ever patch bundle, addressing at least 974 security vulnerabilities across its Windows operating systems and software. This record-breaking update includes 113 critical flaws and two actively exploited zero-day vulnerabilities, CVE-2026-81963 and CVE-2026-85880, which allow for privilege escalation. The surge in patch volume is attributed to the increasing use of artificial intelligence in vulnerability research, a trend also observed at companies like Google and Adobe. Security experts warn that the sheer scale of these updates places a significant burden on IT teams, who must prioritize testing and deployment to avoid business disruption. While AI is accelerating the discovery of flaws, analysts note that organizations should focus on risk-based remediation rather than attempting to address every single patch, emphasizing the importance of identifying which vulnerabilities are truly reachable and exploitable within their specific environments.