Microsoft has announced that Windows users should expect a greater number of security updatesa direct consequence of the increasingly extensive use of artificial intelligence to identify vulnerabilities within the operating system. According to the company, recent advances in AI allow it to analyze increasingly larger amounts of code in less time, speeding up the discovery of potential flaws before they can be exploited in cyber-based attacks. zero-day vulnerability.
This evolution allows developers to intervene in advance, reducing risks for users. Among the tools adopted by Microsoft is MDASH, the system developed by Microsoft Security for the automated search of vulnerability via artificial intelligence. This platform examines the most important components of Windows using several AI models that collaborate in identifying and testing possible security issues.
The identified vulnerabilities are then subjected to a second Windows-specific validation process, designed to eliminate false positives. Only after this further analysis are the results entrusted to the engineers, who investigate each report in depth before deciding on any interventions.
Learn more about using AI in Windows
Artificial intelligence it is not used exclusively for identify new flaws. Microsoft also uses it to help developers more quickly understand the causes of failures, suggest possible fixes, and identify similar errors in other parts of the operating system’s source code. Despite the growing use of automation, Microsoft specifies that the final check will continue to be entrusted to the company’s technicians.
Each change proposed by the AI will be verified by specialized personnel before being integrated into the official versions of the software. The company therefore expects that future Patch Tuesday monthly updates will include a more security fixes than ever beforeprecisely because artificial intelligence will make it possible to identify more vulnerabilities in advance.
Microsoft also points out that the same AI technology is now also used by cyber criminals to develop new attacks and exploit vulnerabilities before they are fixed. For this reason the company has updated its procedures Secure Development Lifecycleintegrating artificial intelligence from the early stages of software development.
