Microsoft patches record number of security vulnerabilities, citing its use of AI

In Brief

Microsoft released a grounds fig of information patches for Windows, Office, and different tech merchandise lines this week, citing the usage of AI to assistance the find of codification vulnerabilities.

The exertion and unreality elephantine issued patches for 570 information flaws connected Tuesday arsenic portion of its monthly scheduled merchandise of fixes, which information researchers person agelong dubbed “Patch Tuesday.”

At slightest 2 of the vulnerabilities are classified arsenic zero-days, meaning that they were exploited earlier Microsoft was made alert of them. One bug affecting Windows Server allows hackers to escalate their privileges from a constricted idiosyncratic to a strategy administrator. Another bug affects the SharePoint record sharing server — the U.S. government’s cybersecurity bureau CISA has warned hackers were actively exploiting the bug to compromise organizations.

Krebs connected Security archetypal reported the news.

The immense spot update comes a week aft Microsoft said successful a blog post that it expected its accustomed batch of monthly information patches to beryllium acold higher successful fig than before. The institution cited its usage of AI to assistance its employees uncover antecedently undiscovered information bugs successful its software.

“As AI helps defenders observe much issues, customers volition spot a higher measurement of information updates included successful each information release,” said Windows brag Pavan Davuluri.

As AI models go much precocious and focused connected cybersecurity issues, information researchers are utilizing them to uncover vulnerabilities that whitethorn person been dormant successful bundle codification for years, if not longer. Parts of Microsoft’s Windows codification dates backmost decades.

Subscribe for the industry’s biggest tech news