Microsoft patches record number of security vulnerabilities, citing its use of AI

This week, Microsoft has made headlines by releasing an unparalleled number of security updates for its suite of products, including Windows and Office. The tech giant issued patches for a staggering 570 vulnerabilities during its monthly update cycle, commonly referred to as "Patch Tuesday." Among these numerous flaws, two critical vulnerabilities have been flagged as zero-days, meaning they were actively exploited by attackers before Microsoft had a chance to address them. One of these vulnerabilities impacts Windows Server, enabling hackers to escalate their privileges from a standard user to a system administrator. In another concerning instance, a bug in the SharePoint file sharing server has prompted warnings from the U.S. government's cybersecurity agency, CISA, indicating that cybercriminals are actively exploiting this flaw to infiltrate organizations. This substantial update follows Microsoft’s recent announcement anticipating a surge in the number of security patches, attributed largely to the integration of artificial intelligence in their security protocols. Pavan Davuluri, head of Windows, noted that as AI technologies evolve, they empower security teams to identify more hidden vulnerabilities in software. "As AI aids defenders in uncovering additional issues, customers can expect a greater volume of security updates in each release," Davuluri explained. With the advancement of AI models targeting cybersecurity, researchers are now equipped to detect vulnerabilities that might have remained unnoticed in software code for years, highlighting the ongoing evolution of cybersecurity practices at Microsoft.