Microsoft Issues Record 570 Security Patches in July Update

Microsoft released 570 security patches in its July 2026 Patch Tuesday update, the largest single batch of fixes the company has ever issued in a single monthly release.

The patches address vulnerabilities across Windows, Microsoft Office, Azure cloud services, and other products. Security researchers said the scale of the update reflects both the complexity of modern software and the growing role of AI in finding flaws before attackers can exploit them.

Microsoft said many of the vulnerabilities in this update were identified by internal AI systems rather than by human researchers or external reports. The company has been investing in AI-assisted security tools as part of a broader push to find and fix bugs faster than traditional methods allow.

Several of the patched vulnerabilities were rated critical, meaning they could allow an attacker to take control of an affected system without any action from the user. Microsoft urged customers to apply the patches as quickly as possible.

The July update comes as cybersecurity threats have grown more sophisticated. Security researchers documented the first real-world agentic ransomware attack, called JadePuffer, earlier this month. The attack used autonomous AI agents to execute an extortion workflow without human involvement, a development that has alarmed the security community.

Cybersecurity mergers and acquisitions have nearly tripled in the first half of 2026 compared to the same period last year, as companies rush to build defenses against AI-driven threats.

CISA also issued an alert in July warning that Russian state-sponsored hackers have been compromising home and small business routers to build residential proxy networks used in further attacks.