AI-Powered Bug Discovery Yields Record Number of Security Patches

Microsoft's latest Patch Tuesday release has set a new record, with the company issuing 570 security patches for Windows, Office, and other tech product lines. The surge in patches is attributed to the use of artificial intelligence (AI) to aid in the discovery of code vulnerabilities.

The patches were released on Tuesday, marking the company's monthly scheduled release of fixes. At least two of the vulnerabilities are classified as zero-days, meaning that they were exploited before Microsoft was made aware of them. One bug affecting Windows Server allows hackers to escalate their privileges from a limited user to a system administrator, while another bug affects the SharePoint file sharing server. The U.S. government's cybersecurity agency CISA has warned hackers were actively exploiting the bug to compromise organizations.

As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release, said Windows boss Pavan Davuluri.

The use of AI in cybersecurity has led to a significant increase in the number of vulnerabilities being discovered. Advanced AI models are being used to uncover previously undiscovered security bugs in software code that may have been dormant for years. Parts of Microsoft's Windows code date back decades, making it a prime target for such vulnerabilities.

• Some of the key patches issued this week include:
  • Fixes for 570 security flaws
  • Two zero-day bugs, including one affecting Windows Server
  • A bug affecting the SharePoint file sharing server, which has been exploited by hackers
  • The use of AI to aid in the discovery of code vulnerabilities
  • A significant increase in the number of vulnerabilities being discovered
  • Patches released on Tuesday, marking the company's monthly scheduled release of fixes

Microsoft's decision to utilize AI in its bug discovery process has paid off, with the company issuing a record number of security patches. As AI models become more advanced and focused on cybersecurity issues, security researchers are using them to uncover vulnerabilities that may have been dormant in software code for years.