Microsoft patches a record 974 flaws, and two are already under attack

Microsoft’s September Patch Tuesday fixes 974 security flaws across its products, according to the company’s release notes. Attackers were already exploiting two of them before the patches landed on Tuesday. Both zero-days let an attacker who already has a foothold on a Windows machine gain higher privileges.