Back to all articles
•Technology

Microsoft's AI-Driven Effort Uncovers Record 570 Security Flaws

View original source

This week, Microsoft set a record by releasing patches for 570 security vulnerabilities across its tech product lines, including Windows and Office. This substantial patch update, part of the company's monthly 'Patch Tuesday', was largely driven by advancements in AI technology used to identify previously undiscovered security flaws.

  • Zero-Day Vulnerabilities: At least two critical vulnerabilities were classified as zero-days, indicating they were exploited by hackers before Microsoft was notified.
    • One such vulnerability allows hackers to escalate privileges on Windows Server, while another affects the SharePoint file-sharing server, currently being exploited by hackers according to CISA.
  • AI's Role in Cybersecurity: Microsoft's recent blog post highlighted that the integration of AI aids in uncovering long-dormant security bugs, leading to a higher volume of patches.
    • Pavan Davuluri, Windows head, noted that as AI uncovers more issues, users can expect more frequent security updates.
  • This advancement in using AI signifies a pivotal shift towards leveraging technology in identifying cybersecurity threats, reflecting on the evolving landscape where portions of Microsoft's software architecture could remain vulnerable due to their age.

The initial reporting on this record patch update was by Krebs on Security.