Microsoft has released its largest-ever monthly batch of security updates, issuing fixes for 570 vulnerabilities across Windows, Office, Azure, Visual Studio and other products. The company says the increase reflects its growing use of artificial intelligence to identify software flaws before attackers can exploit them.
The updates were released as part of Microsoft’s monthly Patch Tuesday cycle. In a recent security announcement, Microsoft said customers should expect larger security releases going forward as AI helps engineers discover more vulnerabilities across its software portfolio.
Among the patched issues are two zero-day vulnerabilities that were already being exploited before fixes became available. One affects Windows Server and allows attackers with limited access to elevate their privileges to full system administrator. The other targets Microsoft SharePoint Server and has prompted an alert from the U.S. Cybersecurity and Infrastructure Security Agency (CISA), which warned organizations that attackers were actively exploiting the flaw.
AI Is Changing Vulnerability Discovery
Microsoft said AI-assisted security research is uncovering weaknesses that previously went unnoticed, including bugs buried in legacy code that has existed for years.
“As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release,” Windows chief Pavan Davuluri said in Microsoft’s security blog.
The shift highlights how AI is changing cybersecurity for both defenders and attackers. Security researchers can now analyze large codebases far more efficiently, allowing them to identify subtle vulnerabilities that would have taken much longer to find through manual review.
Many components of Windows have evolved over decades, making automated analysis particularly valuable as Microsoft continues maintaining one of the world’s largest software ecosystems.
Organizations Urged to Patch Quickly
The SharePoint vulnerability has drawn particular attention because it is already being exploited in attacks against organizations. CISA urged administrators to apply Microsoft’s updates as soon as possible and follow any additional mitigation guidance where patches cannot be deployed immediately.
The record-breaking Patch Tuesday also serves as a reminder that organizations face an increasingly complex security environment. While AI is helping vendors identify and fix vulnerabilities faster, it is also accelerating the pace at which new issues are being discovered, increasing the volume of updates that IT teams must manage.
For enterprise customers, the latest release underscores the importance of maintaining timely patch management processes, especially for internet-facing servers and critical business infrastructure where actively exploited vulnerabilities can quickly become entry points for attackers.
Featured image credits: Roboflow Universe – Chayada
For more stories like it, click the +Follow button at the top of this page to follow us.