Microsoft expands AI use in Windows vulnerability discovery and repair

Microsoft says it has expanded AI assistance across Windows vulnerability discovery, repair and update validation. Its MDASH code scanner uses multiple AI models and specialized agents to find and validate potential vulnerabilities before security and engineering teams review the findings. The company also uses AI to assess affected Windows versions, find related flaws, evaluate fixes and build tests. Engineers retain responsibility for decisions and final output. Microsoft publishes vulnerability details in machine-readable formats for security tools, but Windows security updates are cumulative: organizations can prioritize which devices update first, rather than choose which fixes to deploy.