The point: Microsoft uses multi-model AI scanning to detect vulnerabilities in Windows earlier and thereby increase the number of patches per patch cycle.
Microsoft deploys the AI platform MDASH to find security gaps in Windows source code faster. This significantly increases the volume of monthly security updates.
What is happening: Microsoft has announced that it will systematically employ artificial intelligence for vulnerability analysis of Windows source code. The MDASH system (Multi-model agentic scanning harness) scans critical Windows binaries, validates findings across multiple AI models, and uses a specialized Windows testing pipeline to reduce false alarms. All detected vulnerabilities and proposed code changes remain under human control and are manually validated by developers before being released.
Impact on the patching process: The accelerated vulnerability detection leads to a higher density of security updates within monthly patch cycles. Microsoft explains that “the pace of vulnerability discovery changes with AI advances, making it possible to find more issues faster and across larger volumes of code.” For CISOs, this concretely means that the update packages provided on the monthly Patch Tuesday will be larger.
Adaptation of the security framework: Because attackers also use AI for automated zero-day discovery, Microsoft has adapted its Secure Development Lifecycle (SDL). The guidelines now explicitly account for AI-assisted attack scenarios and integrate AI analysis earlier in the software development process.
Parallels in government security: U.S. CISA is testing the Anthropic model Mythos (publicly known as Fable) in parallel in its Attack Surface Evaluation unit. This reviews repositories of federal agencies for vulnerabilities. According to reports, automated code audits have already identified multiple vulnerabilities, though agencies have not disclosed the exact number or criticality levels.
Source: www.it-daily.net · Published July 13, 2026
Lumi AI News — AI-assisted curation in accordance with Art. 50 EU AI Act. Paraphrase and classification by Lumi News Pipeline v1.7.3.