This is great. Now ask Mythos to make windows suck less and let it go crazy.
Microsoft has released software updates to plug at least 570 security holes
31–40 of 132 posts
Re: Microsoft has released software updates to plug at least 570 security holes
#32An employee just got phished by adding a number to a legitimate deviceAdd login route that bypasses 2FA and adds a device with full access to office and mail Probably working as intended...
Sounds like one of ADOs recent security misconfiguration vulnerability announcements. The customer is blamed, for not quite hardening everything the right way, when ADO config is... A sizeable task.
Re: Microsoft has released software updates to plug at least 570 security holes
#33How many are chained, and how many patches are defense-in-depth after discovering chained paths to that flaw?
Re: Microsoft has released software updates to plug at least 570 security holes
#34Sounds like a lot but compare it to Edge also being patched for 428 Chromium CVEs this month. If 20 years ago you told me a single piece of software had 428 vulnerabilities I wouldn't have believed it. If Chromium has that many security bugs, perhaps the move fast and break things approach of spraying diarrhea masquerading as code into a keyboard — in a rush to add new features no one asked for — needs to be reexamin…
>features no one asked for
Google asked for them. That's all that matters.
Re: Microsoft has released software updates to plug at least 570 security holes
#35Sounds like a lot but compare it to Edge also being patched for 428 Chromium CVEs this month. If 20 years ago you told me a single piece of software had 428 vulnerabilities I wouldn't have believed it. If Chromium has that many security bugs, perhaps the move fast and break things approach of spraying diarrhea masquerading as code into a keyboard — in a rush to add new features no one asked for — needs to be reexamin…
20 years ago a malformed packet to winsock would crash the computer, 5 years later installing win2k on my buddies computer (no router/firewall) a few minutes after we finished the install "windows will reboot in nn seconds" whelp time to re-install without a network connection... we've added a lot of layers since win2k, mostly in the name of ease of development, and I don't feel like we've met that goal but we sure found a way to get a million monkies behind a million typwriters, and now we're aiming to replace the monkies with simulated monkies. Time to smell my fingers and fall out of the tree ;-D
Re: Microsoft has released software updates to plug at least 570 security holes
#36It seems like bug hunting might be the one area where AI is actually making the world a better place.
99.9% of people complaining about AI making the world a worse place would be fully happy with AI if they shared in the economic benefits of automation.
Re: Microsoft has released software updates to plug at least 570 security holes
#37I wonder how many bugs will be introduced with these fixes...
They don't introduce bugs. They introduce feature experiences.
Re: Microsoft has released software updates to plug at least 570 security holes
#38It seems like bug hunting might be the one area where AI is actually making the world a better place.
99.9% of people complaining about AI making the world a worse place would be fully happy with AI if they shared in the economic benefits of automation.
Not if it ends up deskilling society and taking away what brings us meaning in life.
Re: Microsoft has released software updates to plug at least 570 security holes
#39Earlier quoted context omitted.
How many were introduced by misuse of AI coding/vibe coding though?
highly unlikely for many of them. SharePoint, bitlocker, Active directory, hyper-v, rdp, DHCP and MSMQ are all software/technologies that have decades of history and long pre-dated LLMs. seriously, do people not realise it was entirely possible to write insecure or bad code before LLMs?
Especially if they made heavy use of offshoring, which I would bet they did.
Re: Microsoft has released software updates to plug at least 570 security holes
#40Title is not correct. Microsoft didn't patch a lot of this, they're reporting patches for dependencies that other people patched and Microsoft are inheriting.
For example, Mariner (now branded Azure Linux) is a Microsoft-supported Linux distribution. So in this list of 570 vulnerabilities, Microsoft have reported 100 vulnerabilities inherited from all sorts of open source software projects included in their Azure Linux distribution. The OpenSSH vulnerabilities are described in better detail at https://www.openssh.org/releasenotes.html where it implies 2 vulnerabilities were detected with Swival Security Scanner (using LLMs) and another 6 by other researchers/companies (using undisclosed methods).
As an example of one of the OpenSSH vulnerabilites CVE-2026-59996 which is attributed to Swival Security Scanner, Swival have published the output of their automated vulnerability detection report at https://github.com/Swival/security-audits/blob/main/openssh/...