Microsoft and Palo Alto Networks Report AI-Driven Vulnerability Discoveries
Summary
Microsoft says its MDASH system found 16 vulnerabilities fixed in its latest Patch Tuesday updates. Palo Alto Networks says AI-assisted scans led to 75 vulnerabilities across 26 advisories; none are critical or known to be exploited.
Key points
- Microsoft says its MDASH system found 16 vulnerabilities addressed in its latest Patch Tuesday updates; four were rated critical, including unauthenticated remote code execution flaws.
- MDASH coordinates more than 100 AI agents through stages including scanning, validation, deduplication, and proof construction.
- Microsoft reports that MDASH recovered 96% and 100% of confirmed vulnerabilities in two audited Windows components and scored 88% on the CyberGym benchmark.
- Palo Alto Networks says AI-assisted analysis of more than 130 products contributed to 26 advisories covering 75 vulnerabilities.
- Palo Alto Networks says none of the 75 vulnerabilities are critical or known to have been exploited; three high-severity issues require highly specific configurations for exploitation.
- Microsoft’s MDASH is in limited private preview. Palo Alto Networks says it expects AI scanning to increase vulnerability discovery and patching.
Article Details
- Event Type
- Microsoft and Palo Alto Networks reported using AI systems to find vulnerabilities in their own code and products.
- Impact
- Microsoft said MDASH found 16 vulnerabilities fixed in its latest Patch Tuesday updates, including four critical flaws and unauthenticated remote code execution vulnerabilities in components such as the Windows kernel TCP/IP stack and IKEv2 service. Palo Alto Networks issued 26 advisories covering 75 vulnerabilities; it said none were critical and there was no indication they had been exploited in the wild. Three were rated high severity and required highly specific configurations for exploitation.
People
Vendors
MicrosoftMicrosoft and Palo Alto Networks have separately reported this week that they have seen significant results after turning AI on their own code to find vulnerabilities.Palo Alto NetworksMicrosoft and Palo Alto Networks have separately reported this week that they have seen significant results after turning AI on their own code to find vulnerabilities.
Products
Tools
Claude MythosAdvanced AI models such as Claude Mythos have sparked debate in the cybersecurity industry about what the vulnerability discovery landscape will look like going forward.MDASHthe 137 vulnerabilities fixed with its latest Patch Tuesday updates were found by a new AI system called MDASH (multi-model agentic scanning harness) built by its Autonomous Code Security team.