Microsoft Expands AI Vulnerability Hunting in Windows

Microsoft said Windows customers should expect more frequent security updates as the company expands AI-driven vulnerability discovery across its codebase. The effort centers on MDASH, a proprietary multi-model scanning system used by Microsoft's Autonomous Code Security team to scan critical Windows components, validate findings with multiple AI models, and reduce false positives through a Windows-specific validation pipeline. Microsoft said AI is also being used to analyze failures, suggest fixes, and locate similar flaws elsewhere in source code, while human engineers remain responsible for reviewing code changes and approving remediations.

The company said MDASH has already contributed to the disclosure of 16 previously unknown Windows vulnerabilities, including four Critical remote code execution flaws affecting the TCP/IP kernel stack, IKEv2, Netlogon, and the DNS API library, all patched in a May 2026 security release. Microsoft also tied the initiative to updates in its Secure Development Lifecycle to address AI-enabled attack techniques and introduce AI earlier in development, while reports noted that June 2026 Patch Tuesday fixed more than 200 vulnerabilities, underscoring how AI-assisted discovery is beginning to affect Microsoft's patching cadence and enterprise update workloads.