Don't be surprised if Windows security updates start getting bigger. Microsoft says AI is helping engineers uncover more vulnerabilities before attackers do.
Microsoft announced that future security releases are expected to include more fixes, as AI enables its engineers to identify security issues that previously may have been harder or slower to detect.
Pavan Davluri, vice president for Windows + Devices at Microsoft, portrayed the move as the future of Windows security, saying, “The fastest way to reduce customer exposure is to find issues before attackers can use them.”
To support that shift, Microsoft is using a multi-model AI framework that scans Windows code, validates its findings, and then sends weaknesses flagged with high confidence to Microsoft’s engineers, so humans remain in the loop. The company also updated Microsoft Secure Development Lifecycle to account for AI-powered attack techniques, arguing that defensive practices must evolve alongside advances in AI.
AI-driven security pays Windows customers a visit
In a blog post released on July 9, the company announced the change, framing it as an adaptation to “emerging threats.”
Central to this change is Microsoft Security’s new Multi-model Agentic Scanning Harness (MDASH), an AI-assisted vulnerability discovery system that uses multiple AI models to scan Windows code for potential security flaws. MDASH compares results from multiple AI models and autonomous agents before passing likely vulnerabilities through a validation pipeline. Microsoft separately said its broader security ecosystem processes more than 100 trillion signals each day.
Microsoft said the approach will help its engineers identify more vulnerabilities across Windows at greater speed and scale, allowing more issues to be fixed before they can be exploited.
The company maintains that it will continue to “collaborate with the Microsoft Security Response Center (MSRC) to continuously refine the end-to-end process from vulnerability discovery and issue filing to remediation and validation.”
Part of Microsoft’s optimization playbook
While Microsoft did not directly link the announcement to Windows K2, this latest announcement fits within Microsoft’s broader effort to improve the Windows update experience. Earlier this year, Microsoft pledged to keep Windows updates more reliable and less disruptive for users.
Part of this latest effort aligns with that objective. Microsoft said the increased pace of AI-assisted vulnerability discovery and remediation will not come at the expense of update quality, noting that security updates will continue to undergo extensive validation for compatibility, reliability, and real-world usage before broad release.
What Microsoft recommends for customers
While receiving frequent security updates is important, installing them promptly is just as important.
For organizations, Microsoft recommends testing updates before broad deployment. The announcement also highlighted Windows Autopatch, which can automate update rollout and, for systems that require minimal downtime, the use of hotpatch to apply certain security fixes without requiring a restart.
For users, the message is simple: as Windows security updates add more fixes, staying current remains the best way to benefit from those protections.
Related News: Researchers say they've identified the first agentic ransomware. Learn what JadePuffer can do.