Microsoft has announced a record-breaking Patch Tuesday, releasing updates to fix 1,413 security vulnerabilities. This includes 1,102 issues in Windows, 134 in Office, 61 in Developer Tools, 36 in SharePoint Server, and 22 in SQL Server. Among these vulnerabilities, over 670 are related to privilege escalation, more than 300 involve remote code execution, and around 250 pertain to information disclosure. Over 70 of these vulnerabilities are considered Critical. A particular focus has been placed on CVE-2026-96951, which is actively being exploited. This vulnerability allows attackers to evade Mark of the Web defenses, potentially leading users to execute malicious files. The U.S. Cybersecurity and Infrastructure Security Agency has added this flaw to its Known Exploited Vulnerabilities catalog, urging federal agencies to apply the fixes by mid-October 2026. Another significant flaw, CVE-2026-108398, could allow attackers to bypass Windows Defender Application Control, enabling unauthorized code execution without user interaction. Microsoft also patched CVE-2026-21413, a non-Microsoft vulnerability with a high CVSS score of 9.8, which could lead to remote code execution through specially crafted RAW image files. This surge in vulnerabilities reflects the impact of AI-driven bug discovery, as both vendors and researchers are detecting flaws more rapidly. Microsoft is introducing 'risk cohorts' to help organizations prioritize their patching efforts more effectively, grouping related vulnerabilities for streamlined assessment. This approach is intended to help cybersecurity teams focus on the most critical issues first.