[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"branding":3,"analytics":7,"article-microsoft-patches-974-bugs-two-already-under-attack":10,"sections":41},{"siteName":4,"siteTagline":5,"publisherName":4,"contactEmail":6},"The Revision","Tech news, decoded.","editor@therevision.news",{"gaMeasurementId":8,"adsenseClientId":9},"G-ZW2MV82GYR","ca-pub-8533917693782264",{"article":11},{"id":12,"slug":13,"title":14,"dek":15,"body_md":16,"tags_json":17,"published_at":18,"created_at":19,"updated_at":20,"status":21,"review_note":22,"review_notes":23,"image_url":22,"persona_id":22,"persona_name":22,"section":30,"tags":31,"sources":36,"feedback":40,"feedback_at":22,"cost_usd":40,"total_tokens":40},6268,"microsoft-patches-974-bugs-two-already-under-attack","Microsoft Patches 974 Bugs, Two Already Under Attack","Microsoft's record-setting September update fixes 974 flaws, but two privilege-escalation zero-days were already being exploited when it shipped.","Microsoft's biggest Patch Tuesday yet also carried two bugs attackers were already using before the fixes landed.\n\nThe September update closes 974 security flaws across Windows and other Microsoft products, the company said in its release notes - the largest single batch in Patch Tuesday's history. Two of those flaws were already under active attack when the update shipped on Tuesday. Both let someone who already has a foothold on a Windows machine escalate to higher privileges rather than break in from scratch. Microsoft identified one as CVE-2026-81963, a flaw in the Windows Update Stack; its release notes do not specify a CVE number or affected component for the second exploited flaw.\n\nThat gap matters because privilege-escalation zero-days are usually the second half of a real-world intrusion. Attackers rarely walk through a locked front door - they phish a low-level account or drop malware first, then use a bug like this to become an administrator. A record patch count grabs headlines, but it's the two flaws already in criminals' hands that security teams need to prioritize this week.\n\n974 fixes in a single release is a lot of ground to cover, and it's a reminder that \"record\" Patch Tuesdays are becoming routine as Microsoft's product surface keeps expanding.","[\"microsoft\",\"patch tuesday\",\"zero-day\",\"windows security\"]","2026-09-10T17:29:00.000Z","2026-09-10T18:24:58.139Z","2026-09-10T18:25:09.639Z","published",null,[24],{"id":25,"reviewer":26,"round":27,"reason":28,"status":29},"publisher-r1","publisher",1,"The body says two zero-day bugs were exploited and names a CVE for the first, but never identifies or describes the second one, leaving the article incomplete.","resolved","security",[32,33,34,35],"microsoft","patch tuesday","zero-day","windows security",[37],{"name":38,"url":39},"The Next Web","https:\u002F\u002Fthenextweb.com\u002Fnews\u002Fmicrosoft-september-patch-tuesday-974-flaws-two-zero-days",0,{"sections":42},[43,48,51,56,61,66,71,75,80,85,90,95,100,105],{"name":44,"slug":45,"count":46,"latest_published_at":47},"AI","ai",3480,"2026-09-11T04:00:00.000Z",{"name":49,"slug":30,"count":50,"latest_published_at":47},"Security",628,{"name":52,"slug":53,"count":54,"latest_published_at":55},"Policy","policy",336,"2026-09-11T00:56:21.000Z",{"name":57,"slug":58,"count":59,"latest_published_at":60},"Deals","deals",179,"2026-06-29T20:02:07.000Z",{"name":62,"slug":63,"count":64,"latest_published_at":65},"Hardware","hardware",153,"2026-09-09T15:12:32.000Z",{"name":67,"slug":68,"count":69,"latest_published_at":70},"Consumer Tech","consumer-tech",99,"2026-09-09T17:27:33.000Z",{"name":72,"slug":73,"count":74,"latest_published_at":47},"Science","science",98,{"name":76,"slug":77,"count":78,"latest_published_at":79},"Software","software",75,"2026-09-10T20:41:21.000Z",{"name":81,"slug":82,"count":83,"latest_published_at":84},"Dev Tools","dev-tools",69,"2026-08-18T04:00:00.000Z",{"name":86,"slug":87,"count":88,"latest_published_at":89},"Startups","startups",55,"2026-09-09T23:14:29.000Z",{"name":91,"slug":92,"count":93,"latest_published_at":94},"Gaming","gaming",43,"2026-09-10T12:18:06.000Z",{"name":96,"slug":97,"count":98,"latest_published_at":99},"General","general",41,"2026-09-08T01:57:23.000Z",{"name":101,"slug":102,"count":103,"latest_published_at":104},"Reviews","reviews",20,"2026-06-24T12:00:01.000Z",{"name":106,"slug":107,"count":108,"latest_published_at":109},"How-To","how-to",6,"2026-06-16T09:00:00.000Z"]