**Microsoft** has announced that **Windows** users should anticipate a rise in security updates, attributing this change to the company's escalating use of artificial intelligence in vulnerability discovery. In a recent blog post, **Microsoft** detailed how advancements in AI are dramatically speeding up the identification of security issues, enabling engineers to pinpoint more vulnerabilities before they can be leveraged in zero-day attacks. "The pace of vulnerability discovery is changing with advances in AI making it possible to find more issues, faster, across more code, with new mechanisms that can accelerate both discovery and analysis," **Microsoft** stated. ### AI-Powered Vulnerability Scanning Central to this new approach is **Microsoft Security's multi-model agentic scanning harness (MDASH)**. This AI-powered system scans critical **Windows** binaries and employs multiple AI models to validate potential vulnerabilities. Candidates are then funneled through a specific **Windows** validation pipeline to filter out false positives before human engineers conduct their investigations. **Microsoft** is also leveraging AI to enhance engineers' understanding of failures, suggest potential bug fixes, and identify similar flaws elsewhere in the **Windows** source code. Despite the increased AI integration, the company assures that human engineers will maintain oversight, reviewing all proposed code and validating fixes prior to production release. ### Impact on Patch Tuesday The increased adoption of AI for vulnerability discovery means customers are likely to see a greater number of security updates included in each monthly **Patch Tuesday** release. "As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release," **Microsoft** confirmed. ### Adapting to AI-Enabled Threats While AI is proving invaluable in finding and fixing vulnerabilities, threat actors are also harnessing AI to power their attacks and exploit zero-day flaws. In response, **Microsoft** is updating its **Secure Development Lifecycle (SDL)** practices. These updated practices will account for AI-enabled attack techniques and integrate AI earlier into the software development process to identify security issues proactively, even before new features are released. This announcement follows a recent **Reuters** report revealing that the U.S. **Cybersecurity and Infrastructure Security Agency (CISA)** has begun utilizing **Anthropic's Fable AI** model to scan government software for vulnerabilities. According to the report, these AI-assisted code audits have already uncovered numerous vulnerabilities, though specific details on their number or severity were not disclosed.