Microsoft plans to increase the use of AI in its security updates process, enabling a higher volume of security fixes to be included in each release.

Developers will continue to verify AI findings and make risk-based decisions about updates, keeping human oversight in code review and release decisions.

Investments will expand AI integration with Windows-specific tools and agentic harnesses to generate and validate security fixes, while ensuring human review remains part of the process.

The company will use AI to flag potential issues earlier in the development cycle, potentially speeding up the delivery of fixes.

Microsoft is updating its Secure Development Lifecycle to explicitly account for AI-enabled attack techniques and exploit paths.