Microsoft's Massive August Patch Drops Over 400 Vulnerabilities

Microsoft's August Patch Tuesday saw a massive release of over 400 vulnerabilities, including dozens rated critical and two zero-days. This month's update spans Windows, Office, Azure, Exchange Server, SharePoint, Teams, Power BI.NET, Visual Studio, and other Microsoft products.

The number of patches is staggering, with nearly 200 CVEs addressed in June before July surged past 500. However, according to Tyler Reguly, associate director of security R&D at Fortra, administrators should not be alarmed by the sheer number of fixes.

Reguly noted that only one vulnerability was known to be under active attack when Microsoft released its updates. He advised security teams to focus on maintaining a patching process that can absorb the new pace, rather than rushing through updates.