Microsoft has warned customers to expect more security patches for the foreseeable future due to AI, as the company’s executive vice president for Windows + Devices, Pavan Davuluri, wrote in a Thursday post that AI helps defenders discover more issues, leading to a higher volume of security updates in each release. Davuluri’s post notes that Microsoft offers tools to automate patching and argues that investment in such tools is justifiable because AI improves overall security. He wrote that by applying AI across security analysis, Microsoft can identify patterns faster, prioritize risk, and scale vulnerability discovery across the Windows codebase. The post explains Microsoft uses a tool called the multi-model agentic scanning harness (MDASH), which utilizes multiple models including leading third-party AI vulnerability discovery models, with dedicated cloud infrastructure for scanning and proving. Davuluri stated this process handles a larger volume of potential vulnerabilities and shortens the review window, shrinking the attack window for zero-day exploits. Separately, Oracle recently announced AI bug-finders will add a monthly critical patch dump to its current quarterly security update service, and VMware has responded with a new offering called "Express Patches" that ship independently of product updates.