ทันเอไอ

Microsoft Warns: Next Windows Updates Will Be Larger Due to AI-Assisted Vulnerability Discovery

Microsoft confirms a trend of larger Patch Tuesday security updates after AI helped detect vulnerabilities faster and in greater numbers, leading to a record-breaking month.

Windows users should prepare for larger and more frequent security updates in the near future. Microsoft has confirmed it is integrating artificial intelligence (AI) into its software security vulnerability discovery process, which has significantly accelerated the detection of issues and increased their volume. This change was tangibly evident in the recent June Patch Tuesday, recorded as the largest in history, with over 200 security vulnerability patches released (independent sources confirmed 206 CVEs from Microsoft). Among these were 32 critical vulnerabilities and 3 publicly disclosed zero-day vulnerabilities. Tom Gallagher, Corporate Vice President of Engineering for the Microsoft Security Response Center (MSRC), stated in an official blog post that "Microsoft engineers and the broader security community are using AI to scrutinize software in more detail and with greater frequency than was practically possible just a few years ago." The company therefore predicts that the trend of large updates will continue for some time. Furthermore, Microsoft has enhanced its Secure Development Lifecycle (SDL) to better prepare for new attack techniques and vulnerabilities that may arise specifically from AI. However, Microsoft did not confirm that every future update would break records, but acknowledged that the overall volume of vulnerability fixes would be higher than in the past. This reflects the intensifying cybersecurity competition, with developers using AI to find weaknesses, and malicious actors potentially using AI as an attack tool.