Microsoft discloses two actively exploited zero-days among 974 vulnerabilities
CyberScoop coverage of Microsoft’s record September Patch Tuesday. Nearly 1,000 flaws addressed, including two zero-days already exploited in the wild (Windows ALPC and Windows Update Stack elevation-of-privilege issues). The surge continues a trend linked to AI-assisted discovery tools. Analysts note that while disclosure volume has risen sharply, a corresponding explosion in widespread active exploitation has not yet materialized, but prioritization remains essential.
https://cyberscoop.com/microsoft-patch-tuesday-september-2026/