• 2 min read
Microsoft ships 570 fixes in record Patch Tuesday
Microsoft released patches for 570 flaws across Windows, Office, and more, including two zero-days, and said AI is helping uncover more bugs.
Image: TechCrunch
Microsoft pushed a record 570 security patches on Tuesday across Windows, Office, and other product lines, marking an unusually large Patch Tuesday release that the company says reflects its growing use of AI to find software flaws.
The update includes at least two zero-days — vulnerabilities that were exploited before Microsoft knew about them. One affects Windows Server and allows attackers to escalate privileges from a limited user account to a system administrator. The other hits SharePoint, where the U.S. cybersecurity agency CISA warned that hackers were actively exploiting the flaw to compromise organizations.
Krebs on Security first reported the news. Microsoft had signaled the spike a week earlier in a blog post, saying its normal monthly patch count would be significantly higher than usual.
The company linked the increase directly to AI-assisted bug hunting.
Recommended reading
AI won’t replace penetration testers just yet
“As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release.”
That tracks with a broader shift in security research: as models improve and are tuned for cybersecurity work, researchers are using them to surface vulnerabilities that may have sat unnoticed in old code for years. In Microsoft’s case, some parts of Windows date back decades, leaving a vast codebase where long-hidden bugs can still turn up.
Security Editor
Sophia unpacks the invisible wars happening on our networks. Covering cybersecurity, privacy legislation, and cryptography, she exposes how our data is weaponized and defended. Before joining for(geeks), she spent years as a penetration tester. She's the reason the rest of the team uses physical security keys.
via TechCrunch
