Begun, the Patch Wars have
Summary: Microsoft's July Patch Tuesday shipped 622 vulnerabilities, 62 of them critical, with three zero-days and two under active exploitation - more flaws in one month than all of 2018 combined, against just five patches two years ago. Microsoft attributed the volume to AI frontier-accelerated vulnerability research, and Cisco Talos noted every other vendor is now pulling bugs from a fire hose through bug bounty programs and internal research.
What you should know: The standard enterprise cycle of test, review stability, then deploy was built for a sane patching load, and Talos warns that a hot summer could become a 12-month fusillade of KEV and EPSS notifications that taxes teams already under the gun - if everything is a fire drill to patch, then nothing is.
Read the original at Cisco Talos ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026