973 vulnerabilities landed in one release.

Understaffed hospitals, ministries and utilities now must triage a record patch load or stay exposed.

The Cybersecurity and Infrastructure Security Agency says two of the 973 are already exploited, indistinguishable from the rest until an advisory is read line by line.

Which systems get patched first is now each institution’s call, not Microsoft’s.

How each outlet framed it
The Record leans critical
reconstructs ransomware chain risk: attacker who owns update component owns 'the thing you'd use to evict them,' defeating remediation

Sources: The Record