Has Microsoft’s patch cycle become fat patch Tuesday? – Spiceworks

Microsoft’s September update approached 1,000 new CVEsOpens a new window in September 2026. The number is startling, but the right response is better triage and staged deployment—not one very long Patch Tuesday night.

This year when I huddled with admins, security and compliance professionals in the trenches, our conversations were mostly about the rising pressures to keep up with the explosion of risk with agentic AI. Among the pressures is the ability to keep up with the increasing number of vulnerability patches while avoiding impact on operations. The September 2026 release of Microsoft vulnerability statistics — it feels like the dam broke wide open.

Microsoft’s patch volume has increased sharply since late 2025Opens a new window , and the break from the old pattern became unmistakable in spring 2026. A consistent month-by-month series of new Microsoft CVEsOpens a new window —not republished Chromium or third-party issues—shows an average of 89 per month…