Archive — US — techcrunch
Microsoft patches record number of security vulnerabilities, citing its use ofAI
Microsoft issued a record 570 security patches for Windows and Office, leveraging AI to identify vulnerabilities. This month's update includes two critical zero-day issues, one allowing privilege escalation and another exploited by hackers through SharePoint. The AI-assisted discovery expectedly elevates the number of patches released, highlighting growing reliance on AI in cybersecurity.
Key points
- Microsoft released 570 security patches this week for its products, including Windows and Office.
- This release is part of the routine 'Patch Tuesday' update, renowned for fixing vulnerabilities.
- Two vulnerabilities are classified as zero-days, meaning they were exploited before detection.
- One zero-day affects Windows Server, allowing hackers to escalate privileges.
- The other zero-day targets SharePoint, with warnings from CISA about active exploitation.
- Microsoft anticipates an increase in patch numbers due to AI aiding in vulnerability discovery.
Why it matters
- In 2023, there has been a significant focus on AI's role in cybersecurity, with AI tools becoming pivotal in identifying and mitigating software vulnerabilities.
- The increase in vulnerabilities and patches highlights the ongoing evolution of security threats in an increasingly tech-reliant society.
- Historical events, such as the SolarWinds hack, emphasize the importance of robust security measures in software due to potential widespread exploitation of vulnerabilities.
The surge in Microsoft's security patches underlines the crucial role of AI in modern cybersecurity measures, reflecting a proactive approach to addressing emerging threats as the digital landscape evolves.