Why this month's Microsoft patch release is a doozy
Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.
Security gnomes are pumping out patches ahead of an expected onslaught of AI-assisted attacks.
The short version
- Microsoft’s patch for September is a doozy, with a record number of roughly 972 vulnerabilities fixed and 112 of them meeting the high critical-severity threshold.
- Dustin Childs, a researcher at the Zero Day Initiative, calls the spikes the “new normal” and also cautions that despite them, the damage that’s likely to result from AI-assisted attacks could eventually be substantial.
- “On the one hand, congrats to the security gnomes at Microsoft for being able to patch bugs at this rate,” Childs wrote Tuesday .
What happened
“On the other hand, AI-assisted vulnerability discovery shows no signs of slowing down. There’s no public information about who is exploiting them or how broadly.
Why it matters
Other notable vulnerabilities Childs called out are: The researcher said he found so many of Tuesday’s vulnerabilities that were wormable that he stopped counting at 20.
Summary by Nerd News Network. Read the full article at Ars Technica via the links above and below.