Microsoft uses AI-assisted discovery to close Windows vulnerabilities earlier
Microsoft says AI-assisted code review is helping find Windows vulnerabilities across more code and earlier in development, while its October update addressed more than 1,100 CVEs.
AT A GLANCE
Key points
- AI-assisted discovery is examining more Windows code earlier in development.
- The October 2026 update addressed more than 1,100 Windows CVEs.
- About one in four devices in the measured enterprise sample remained unpatched after four weeks.
What is changing?
Microsoft says it is expanding AI-assisted vulnerability discovery across Windows development and servicing. According to the company, AI systems help examine more code in greater depth and identify issues earlier in the engineering process. The October 2026 monthly security update addressed more than 1,100 Windows CVEs. Microsoft argues that the higher count does not mean Windows became less secure, but that more vulnerabilities were found and closed.
The larger operational risk is how quickly patches reach devices. In Microsoft’s August 2026 enterprise sample, fewer than half of devices installed the security update within two weeks, while about one in four remained unpatched after four weeks. Microsoft publishes CVE data in CSAF, VEX and API formats so teams can prioritize internet-facing systems, identity infrastructure and other high-value assets.
Explore the original sources
Source date: 6 November 2026.
Published by AI Radar: 6 Nov 2026, 01:05 (Istanbul, UTC+3).
FOLLOW THE TOPIC
Topics and tags
Share your discovery.
Send this story to a friend.
Reader comments
What do you think about this development? Share your experience or question. Comments are published after editorial approval.
Your name/nickname and comment become public if approved. Read: Privacy notice.
Loading comments…