by Jesper Kråkhede, Sweden
Posted in Security Architecture, Security metrics, Technology on Oct 15th, 2026
In April I predicted a wave of patches over two to three years, followed by a lower level than before. Half a year later, let´s look at the numbers. This week Microsoft released 1,408 new CVEs in one Patch Tuesday. In all of 2025, Microsoft published 1,244. One month beat the whole of last year. […]
Posted in Security Architecture, Technology on May 13th, 2026
This month Microsoft announced something I think we will remember. A new AI system, codename MDASH, helped its researchers find 16 new vulnerabilities in the Windows networking and authentication stack, four of them critical remote code execution flaws. They were fixed in this month´s Patch Tuesday. MDASH, the multi-model agentic scanning harness, isn´t a single […]
Posted in Security Architecture, Technology on Apr 15th, 2026
Something is happening to the number of vulnerabilities. The monthly security updates from the large vendors are getting bigger, and the number of published CVEs in the industry is growing faster than ever. The vendors are open about one of the reasons: AI helps them find bugs in their own code that were missed for […]