Microsoft AI Warning: Shorten Windows Patch Timelines

Microsoft is rewriting its Windows patch guidance due to AI advancements. The company warns that AI is helping attackers find and exploit vulnerabilities faster after security updates are released. Microsoft recommends organizations shorten their Windows update deployment timelines. Specifically, they suggest a quality update deferral period of fewer than three days, update deadlines of zero or one day, and a grace period of no more than two days. Jeremy Chapman, Microsoft 365 Director, states that waiting even a couple of weeks to deliver critical security fixes gives AI-powered attackers ample time to exploit known security gaps. To help with this, a new Windows Autopatch report in Microsoft Intune can identify unpatched devices. Microsoft also recommends using Hotpatch for eligible security updates, which installs them without a reboot, and enforcing compliance through Conditional Access policies. This guidance aims to reduce the risk from unpatched systems in an evolving threat landscape.