What happened
On Nov 5, 2026 Microsoft's Windows Experience Blog detailed its AI-assisted vulnerability-management lifecycle: MDASH, an agentic code scanner using multiple models and 100+ specialized agents to find and validate vulnerabilities (ranking, taint analysis, multi-model debate, confidence scoring, fix generation via Defender CLI), plus AI-assisted remediation (impact/variant/backport/test analysis) and validation. It reported the October 2026 security update addressed more than 1,100 Windows CVEs while August enterprise data showed under half of devices patched within two weeks.
Why it matters
A first-party, at-scale disclosure of agentic vulnerability discovery and remediation in production use — concrete evidence of how LLM agents accelerate discovery (and the resulting patch-deployment gap) — with a MDASH preview in Defender.
Applicability
Vulnerability-management and platform teams should track the MDASH preview in Defender and the CSAF/VEX/API advisory flow; it is chiefly a Microsoft-process disclosure rather than a turnkey customer product.