
Microsoft’s record 974-fix Patch Tuesday tests how far enterprise patching can stretch
The Sept. 8, 2026 release is Microsoft's largest ever, and two analysts offer different guidance on how much of it matters to most organizations.

The Sept. 8, 2026 release is Microsoft's largest ever, and two analysts offer different guidance on how much of it matters to most organizations.

A new US-led advisory naming a Chinese contractor behind Flax Typhoon-style intrusions lines up with separate warnings on Salt Typhoon, Brickstorm and credential-phishing campaigns, pointing to a sustained ecosystem of PRC-enabled network compromise rather than isolated incidents.

The advisory lists hard-coded credentials and a crash bug that could let an attacker take over switch configurations or force repeated reboots, and it lands amid a years-long pattern of security flaws in Red Lion's industrial networking lines.