Microsoft is preparing to release over 650 patches for Windows as part of its September Patch Tuesday, which is approximately six times the usual monthly average. The company typically fixes around 100 vulnerabilities per month, but recent trends show a significant increase: around 200 fixes in June, at least 570 in July, and nearly 400 in August.
The surge in security updates is driven by new AI models that have accelerated the vulnerability discovery process. Specifically, the Anthropic Mythos model identified issues across all major operating systems and web browsers, while OpenAI has also introduced its own cybersecurity-focused AI model available to trusted partners.
The high volume of updates creates a pressure on corporate administrators who must test patches before deployment to ensure they do not disrupt critical business applications. This creates a 'patching gap' between the vulnerability disclosure and the actual fix. Anthropic has noted that Mythos can create working exploits for newly disclosed problems within hours rather than weeks, increasing the risk of attacks during this delay.