Microsoft fixes 570 security bugs in record Patch Tuesday release

In short: Microsoft shipped fixes for a record 570 security problems across Windows, Office, and other products, and said AI helped find more of them.

What happened

Microsoft released its monthly set of security updates on Tuesday, a cycle many security teams call “Patch Tuesday.” This month’s release was unusually large, with fixes for 570 vulnerabilities, which are weaknesses in software that attackers can use.

Microsoft said the higher number is partly because it is using AI to help its teams spot problems in its code. You can think of it like adding an extra set of fast proofreaders that can scan huge amounts of text, except the “text” is software code.

At least two of the fixed issues were “zero-days,” meaning attackers were using them before Microsoft knew about them. One affected Windows Server and could let an attacker move from a limited account to an administrator account, which is like finding a spare master key after only getting a guest key.

The other zero-day affected SharePoint, a file-sharing server used by many organizations. The US government’s cybersecurity agency, CISA, warned that hackers were actively exploiting this SharePoint flaw to break into organizations.

Why it matters

For most people, these updates reduce the chance that criminals can steal data, lock up computers with ransomware, or take over accounts through known software weaknesses. It is also a reminder that as companies use AI to find more bugs, users and IT teams may see more frequent or larger batches of updates. Installing updates promptly matters, especially for businesses running Windows Server or SharePoint.

Source: TechCrunch AI