A major security update from Microsoft this week serves as another reminder that cyber security is no longer just an IT issue. It is a business issue that affects organisations of every size.
During a recent interview on Herald Now, Gorilla Technology CEO Paul Spain discussed Microsoft’s largest-ever security patch, which addressed around 600 vulnerabilities, significantly more than the 50 to 100 typically seen in a standard update.
Paul points out that one of the key reasons for the unprecedented number of vulnerabilities discovered is Microsoft’s increasing use of artificial intelligence to analyse software and identify security flaws. While finding more vulnerabilities may sound alarming, the positive news is that these weaknesses have been identified and addressed before many could be widely exploited.
However, this development highlights a growing challenge. The pace of cyber security threats is accelerating, and organisations must keep up. Some of the vulnerabilities addressed were classified as “zero-day” vulnerabilities, meaning cybercriminals were already taking advantage of them before fixes became available. As Paul Spain noted, businesses need to move quickly when updates are released because attackers rarely wait.
The issue extends beyond Microsoft. During the interview, Paul Spain also referenced a serious WordPress vulnerability that had the potential to expose thousands of websites across New Zealand and millions worldwide. This reinforces a reality that many business leaders are now recognising: cyber security risks exist across every part of the technology ecosystem.
Cyber resilience starts with the fundamentals. Regular software updates, strong password management, secure backup processes, appropriate access controls, and tested incident response plans remain critical defences. AI is becoming an increasingly powerful tool for both defenders and attackers, making these basics more important than ever. But as Paul Spain emphasised, technology alone cannot solve the problem. Whether you are an individual, a small business owner, or part of a large organisation, remaining vigilant and proactive is essential. Cyber security is a shared responsibility, and staying current with updates may be one of the simplest and most effective protections available today.