Overview
- Microsoft disclosed Thursday that it is scaling MDASH, a Multi-Model Agentic Scanning Harness that orchestrates more than 100 specialized AI agents and multiple model families to find and prove exploitable bugs across Windows binaries.
- The firm reported that MDASH helped find 16 vulnerabilities in May, four of them rated Critical, and said it is building Windows-specific validation pipelines to cut false positives before engineers investigate findings.
- Microsoft said AI will suggest fixes and surface similar bugs earlier in development but human engineers will review and validate all proposed code changes and updates.
- Customers should expect a higher volume of fixes in each Patch Tuesday release and the company is advising enterprises to prepare by testing updates, using Known Issue Rollback, and adopting modern patching tools like Windows Autopatch.
- Reporters note a widening defender-attacker arms race because threat actors also use AI to speed exploit development, which raises the risk window for zero-days and increases operational strain across the global Windows install base.