MICROSOFT has announced an expected increase in the number of security updates for Windows, attributing this surge to the integration of AI in security analysis. By employing AI techniques, Microsoft aims to identify more zero-day vulnerabilities and enhance the speed of vulnerability discovery. They have developed a system, MDASH, that utilizes multi-model agentic scanning to validate vulnerabilities efficiently while retaining human oversight to ensure the quality of updates.
This initiative coincides with the U.S. Cybersecurity and Infrastructure Security Agency's (CISA) similar efforts in using advanced AI for vulnerability scanning. Despite the optimism surrounding AI, a recent study indicates a decline in organizations relying solely on AI for vulnerability scanning, highlighting concerns about missing critical vulnerabilities.