By October 2026 published CVEs had risen 105% year on year and Microsoft’s monthly advisories had jumped from about 100 to 1,415; only 3 of the 975 Microsoft advisories in September 2026 were exploited in the wild.

Evidence1 sourceCited by 1 pointCreated Nov 5, 2026

Source

Cisco Talos: There’s only so much code: the rise in vulnerability numbers
Published by blog.talosintelligence.comRecorded Nov 5, 2026
Open the original

Supports: Almost none of the new AI-found bugs are being exploited, so the flood is no reason to rewrite the rules.
- A reason for “Keep 90 days”