Microsoft shipped a record number of security fixes in its July 2026 Patch Tuesday, covering Windows, Office, and other offerings, with the company attributing the dramatic increase to its use of AI to detect code flaws. Windows chief Pavan Davuluri stated, "As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release." The unprecedented volume of fixes reflects a broader trend where AI is transforming vulnerability discovery, with Microsoft applying AI to legacy codebases dating back decades. Among the patches, at least two issues are zero‑days—vulnerabilities that attackers had already exploited before Microsoft learned of their existence. A particular flaw in Windows Server enables attackers to elevate their access rights from a restricted user account to full system administrator privileges, and a separate vulnerability targets the SharePoint file‑sharing platform, for which the U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning.