Microsoft Uses AI to Accelerate Windows Vulnerability Discovery and Patching

Microsoft has unveiled a major expansion of AI-driven security tooling across Windows, aiming to find vulnerabilities earlier, fix them faster, and deliver more reliable patches at scale. The initiative reflects growing pressure on defenders as AI simultaneously accelerates both vulnerability discovery and the speed at which attackers can weaponize new flaws. Central to the effort […] The post Microsoft Uses AI to Accelerate Windows Vulnerability Discovery and Patching appeared first on Cyber Security News.

Microsoft has unveiled a major expansion of AI-driven security tooling across Windows, aiming to find vulnerabilities earlier, fix them faster, and deliver more reliable patches at scale. The initiative reflects growing pressure on defenders as AI simultaneously accelerates both vulnerability discovery and the speed at which attackers can weaponize new flaws. Central to the effort is Microsoft Security’s multi-model agentic scanning harness (MDASH), which combines multiple AI models, including third-party vulnerability discovery tools, to analyze the Windows codebase. Windows AI-Powered Vulnerability Discovery and Patching Microsoft built dedicated cloud infrastructure to run MDASH at Windows scale, using a two-stage pipeline in which a scanner reviews critical binaries and validates candidates through multi-model debate across different model families. Before a separate Windows-specific “prove” pipeline filters out false positives, so only high-confidence findings reach engineers. This automation increases the volume of vulnerabilities reviewed while shrinking the window attackers have to exploit zero-days before patches arrive. Microsoft is also embedding AI into the remediation workflow, helping engineers diagnose failures, draft candidate fixes aligned with existing code, spot related issues elsewhere in the codebase, and select the most relevant regression tests, all while keeping humans in the loop for code review and final risk decisions. Updates still pass through rigorous testing, including the Security Update Validation Program (SUVP), to catch compatibility and reliability issues before broad release. Microsoft is also updating its Secure Development Lifecycle (SDL) to explicitly account for AI-enabled attack techniques and exploit paths. Because AI is surfacing more issues, customers should expect a higher volume of CVEs per security release going forward, a sign of improved detection rather than declining security posture. Microsoft is urging organizations to apply security updates promptly using guidance from the Security Update Guide, to take advantage of optional non-security preview (“D”) releases for compatibility testing ahead of monthly patches, and to rely on Known Issue Rollback (KIR) when needed, which allows a problematic change to be reverted without uninstalling an entire update. Microsoft highlighted several management tools designed to help enterprises keep pace with this accelerated patching cadence. Windows Autopatch, now with hotpatch support through Intune, can speed up security updates while minimizing disruption on Windows 11 devices. It also includes a security-risk and compliance dashboard that gives administrators device-level visibility into exposure. Windows Servers can be hotpatched through Azure Arc for rebootless updates at scale, managed through Azure Update Manager, while Microsoft Defender Vulnerability Management, alongside Intune insights, helps teams understand remaining exposure and prioritize remediation across their estates. Microsoft frames this shift as moving organizations away from calendar-based patching toward a continuous, risk-based approach, one where speed and stability are treated as complementary goals rather than a trade-off as AI reshapes the threat landscape. Follow us on Google News , LinkedIn and X to Get More Instant Updates. Set Cyberpress as a Preferred Source in Google. The post Microsoft Uses AI to Accelerate Windows Vulnerability Discovery and Patching appeared first on Cyber Security News.