Josh Taylor, Lead Cybersecurity Analyst at Fortra, explains in Dark Reading that while July’s record-breaking Patch Tuesday highlights the growing number of vulnerabilities, the greater challenge for organizations is prioritization. He emphasizes that CVSS scores alone are not enough and that teams must focus on exploited vulnerabilities and real world exposure across systems like Windows and Office. This matters because organizations are facing increasing pressure to triage and respond quickly as AI accelerates vulnerability discovery and expands the overall threat landscape.
"If people want a severity hook, July has 26 vulnerabilities with a CVSS base score above 9.0, and 13 of those sit at 9.8," said Josh Taylor, lead cybersecurity analyst at Fortra, in an emailed comment. "That matters, but CVSS is still only one part of the risk story. The real triage problem this month is the mix of exploited issues, a publicly disclosed BitLocker flaw, and a massive concentration of vulnerabilities in Windows and Office." — Josh Taylor, Dark Reading
