Microsoft's autonomous AI discovers 16 new vulnerabilities on Windows, including 4 Critical CERs

Microsoft has revealed MDASH, an autonomous system of discovery of vulnerabilities based on artificial intelligence that has already encountered 16 unprecedented failures in Windows, four of which are classified as critical for allowing remote code execution (RCE). Developed by the company's Autonomous Code Security team, MDAH promises to accelerate the identification of breaches before they are exploited by criminals. Private business preview starts in June.

How does MDAH AI find vulnerabilities in Windows?

MDAH is an intelligent fuzzing system that combines reinforcement learning with static code analysis. Unlike traditional tools that test random inputs, AI prioritizes execution paths more likely to contain errors. According to CSO Online, the system has scanned hundreds of thousands of Windows kernel functions, generating detailed reports that are reviewed by human engineers.

Why are the four faults of CER discovered critical in Windows?

The four vulnerabilities of CER allow an intruder to execute arbitrary code remotely without any user interaction, totally compromising the system. They were discovered in central Windows components, such as drivers and network services. Microsoft has not yet released official patches, but usually corrects reported failures internally before announcing them publicly.

What to expect from MDAH's private preview for Windows security?

Selected companies can test MDASH as an integrated security service to Azure. The idea is that security teams use AI to analyze their own software or even third-party systems under contract. Microsoft did not disclose prices, but signaled that the model will be by subscription focusing on large corporations.

How does the MDASH AI impact Brazilian developers and companies?

For the Brazilian market, the arrival of tools such as MDAH reinforces the importance of proactive security. While Microsoft uses AI to defend, hackers already exploit AI to create zero-day exploits that scam 2FA on a global scale. Local Windows-dependent companies should redouble attention to security updates and consider the adoption of similar automated tests.

Frequently Asked Questions about IA MDASH and Windows vulnerabilities

Will MDAH replace security professionals?

Nope. The system is a support tool that automates the discovery phase, but screening, validation and correction continue to depend on human experts.

Have the failures found been corrected?

Microsoft has not confirmed that all 16 faults have patches ready. Historically, the company fixes vulnerabilities discovered internally in its monthly updates, but the exact schedule has not been disclosed.

When will MDAH be publicly available?

Private business preview starts in June 2025. There is still no date for general public release or for individual developers.