Patch Tuesday

September 2026 Patch Tuesday broke Excel: the case for ring-based deployment

September 2026 Patch Tuesday broke Excel: the case for ring-based deployment

by Jan Holbo Rasmussen

September’s Patch Tuesday was the biggest Microsoft has ever shipped, and one of the updates in it broke copy and paste in Excel. Together they make a good argument for something small IT departments often skip: letting a few people get the updates first.

What shipped on 8 September 2026

A record count, however you count it

How big depends on who you ask. BleepingComputer counted 966 vulnerabilities [1], Tenable 964 [2], the Zero Day Initiative 972 new Microsoft CVEs [3] and SecurityWeek 974 [4]. When I first noted the idea for this post I wrote down 973, which is roughly what you get from reading enough headlines.

Read article →