Microsoft patches record 622 bugs as AI disrupts corporate security
A record-breaking Microsoft security update driven by AI-assisted bug hunting is forcing European companies to abandon slow patching cycles as attackers exploit flaws faster.
Microsoft’s July security update fixed a record 622 vulnerabilities, a figure that more than tripled June’s previous high of 206. An additional 428 Chromium bugs in the Edge browser sit on top of that tally, creating an unprecedented workload for corporate IT departments.
The sheer scale is not a one-off but a structural shift driven by artificial intelligence. Windows chief Pavan Davuluri warned customers last week to expect “a higher volume of security updates” as AI tools locate software flaws with unprecedented speed. Microsoft’s MDASH scanner and Anthropic’s Mythos model have led to a rapid escalation in discovered bugs, rising from 79 in March to this month's peak.
For European enterprises relying on Active Directory and SharePoint for daily operations, this update carries immediate risk. Two zero-day vulnerabilities—CVE-2026-56155 and CVE-2026-56164—are already under active attack, allowing hackers to escalate privileges on internal networks. A third zero-day, a BitLocker bypass requiring physical access, poses a lower threat.
The volume effectively breaks how corporate IT departments triage threats. When a single release contains hundreds of patched flaws, including 58 rated critical, the severity label loses its sorting value. The active exploitation of the two mid-tier Microsoft bugs proves that old habits—like waiting a week to test and deploy patches—are no longer viable.
The same AI accelerating bug discovery also shortens the window for defenders. Once a patch is published, attackers can compare it against older code to build working exploits within hours. This puts stretched security teams under severe pressure, a dynamic mirrored by the wider industry as benchmarks for AI hacking skills are rapidly saturated.
The rollout has already hit friction for some hardware users. Microsoft paused the update for certain Dell devices using Intel chips following user reports of sudden shutdowns, overheating, and rapid battery drain. A fix for those devices is expected within days. For the vast majority of corporate networks, the directive is clear: prioritize patches based on active exploitation, and deploy them immediately.
