Microsoft Patches a Record 570 Security Flaws
Summary: Microsoft released updates for at least 570 security holes across Windows and its other software, nearly triple its previous record Patch Tuesday count from the month before, with almost 60 rated critical and three zero-days addressed, two of them already exploited in the wild. Microsoft EVP Pavan Davuluri attributed the rising volume to AI-assisted vulnerability discovery, and the release included a 9.6 CVSS remote code execution flaw in Microsoft Copilot and a BitLocker security feature bypass, CVE-2026-50661, that Microsoft says was publicly detailed but not actively exploited.
Key Takeaway: Tenable's Satnam Narang cited Anthropic's Red Team finding that its Mythos Preview model produced proof-of-concept exploits for 13 of 14 vulnerabilities rated 'Exploitation Less Likely' or 'Exploitation Unlikely' - the same rating Microsoft originally gave this month's SharePoint zero-day before it landed on CISA's Known Exploited Vulnerabilities list on July 1.