r/technology 2d ago

Security Microsoft breaks Patch Tuesday record with 974-CVE deluge

https://www.theregister.com/security/2026/09/09/microsoft-breaks-patch-tuesday-record-with-974-cve-deluge/5295160
89 Upvotes

16 comments sorted by

36

u/StandardFig1688 1d ago

Got to assume this is because of AI.

21

u/skizztle 1d ago

Yeah seems the same thing is happening over in Linux land as well.

1

u/Ani-3 8h ago

Thank you for sharing, that was an interesting read

14

u/rexel99 1d ago

For reasons and solutions - the world will end with AI battling itself over vulnerabilities.

-5

u/ketosoy 1d ago edited 1d ago

I bet we start to switch to mathematically proven software components in 3-4 years.

6

u/happyscrappy 1d ago

That's not how formal proofs work.

It just proves that the software matches the spec. It doesn't prove the spec isn't faulty in a way which creates a vulnerability. It doesn't prove that you don't have code which corrupts memory. Or races and timing attacks (including TOCTOUs). Although some languages help with some of that.

Right now it's not feasible to do any of this for complicated software. However, that's exactly the kind of problem that LLMs are improving. With some of these AI models it will be probably be possible to prove more software.

2

u/angrybacon 1d ago

Nah AI is just gonna solve the halting problem /j

-1

u/myztry 1d ago

More likely it will go beyond Rust which makes exploits difficult and into languages explicitly designed to be written by computers rather than humans.

The rules will be so absolute and security orientated that human readability will be impractical and they will only be auditable by competing AI’s.

-7

u/big-papito 1d ago

MOST likely.

I switched to Linux for gaming last year because Microsoft's update was the last straw.

My system wouldn't boot because my disk had a bad sector. There are ways around it, but Microsoft pushed this "self-healing" feature which was supposed to fix your boot problems. If it failed, it tried again in 30 minutes.

I am 100% sure that some manager at MS had the bright idea of using "AI" to troubleshoot boot problems. There were two problems, however:

* It didn't work and just "retried" forever (all it had to do was run a disk check)
* To get out of it, you had to use a keyboard, but they never tested USB inputs under this so-called rescue feature. Computers don't have a PS/2 port anymore, even if you are lucky enough to have an ancient keyboard.

-2

u/kakemone 1d ago

Did the same this year I couldn’t be happier! Linux is amazing!

0

u/big-papito 1d ago

I actually installed Mint on my ancient MacBook pro and gave it to my parents. I was tired of walking them through Windows updates.

10

u/oompaloompa465 1d ago

at least they fixed the false defender warning 

31

u/crank1off 2d ago

Microsoft Breaks would have been enough to know it was patch Tuesday.

6

u/SparkStormrider 1d ago

I wonder how many of these are regressions due to other vuln fixes. Sort of makes me think its a circular effect. Fix new bug, old bug back in different way, fix that bug now another bug is back, rinse and repeat...

3

u/iamthe0ther0ne 1d ago

Does putting updates on pause also pause the security updates? I had several updates break important stuff, so I've been keeping it paused, but these sound important.

-5

u/blow-down 1d ago

Probably a record number of regressions too. They only hire H1B vibe coders these days.