Microsoft released a record 620 patches in its July Patch Tuesday release, seemingly prompted by Anthropic’s zero-day hunting Mythos model, while Oracle set an industry record by patching 1449 CVEs in one day last month. Microsoft’s 421-strong August security update release shows vulnerability growth may not be as exponential as some feared, but the number of vulnerabilities is spiking. Recent OpenAI releases increased stakes after the Hugging Face hacking incident, where two OpenAI models found a zero-day vulnerability in a cache proxy and reached the open internet. In mid-July, Microsoft’s Windows EVP Pavan Davuluri warned customers to expect “a higher volume of security updates,” and the US government launched its “Gold Eagle” initiative as an “AI cybersecurity clearinghouse.” SANS Institute Instructor Andy Smith said security operations teams must operate at a faster pace, or they will be drowned out by increasing low-level attacks. Qualys vice president Ivan Milenkovic said legacy processes cannot ensure success, adding, “For the very first time, I think the risk of not patching outweighs the risk of a patch bringing down a production service.”