Microsoft admits AI is exploiting Windows 11 bugs in hours, warns against delaying updates past 3 days

Ahead of the Patch Tuesday rollout on July 14, Microsoft warned that it no longer recommends delaying Windows updates for more than three days, largely because AI can now help discover and exploit bugs within hours.

According to Jeremy Chapman, a director at Microsoft 365 who works closely with the Windows team on enterprise updates, consumers and organizations may want to delay security patches for a few days, and it’s a common practice for some, but “it shouldn’t be” any longer.

You shouldn’t delay Windows updates for more than three days because anything longer gives attackers ample time to exploit bugs using AI.

“The risk is real,” Jeremy warned. “Total addressed vulnerabilities have been on the rise since April this year.”

AI is accelerating the discovery and exploitation of Windows bugs

According to Jeremy, Microsoft found 206 security vulnerabilities in June 2026, and the number is rising every month.

To combat the growing number of security issues, Microsoft now employs its own multi-model agentic system to detect vulnerabilities in Windows 11.

For example, Microsoft found 16 bugs in Windows using its MDASH multi-model agentic scanning harness. It also found four critical remote code execution issues, which is a big deal.

While Microsoft says it’s using AI to patch bugs faster, it also found that attackers are using similar tools to exploit publicly documented security gaps much faster than before.

Security problems with Windows or any other product aren’t new, but the number of vulnerabilities is increasing rapidly, while the way people install updates has not changed.

Once a vulnerability is publicly documented, AI can help attackers analyze the issue and develop an exploit within hours. This is why Microsoft no longer wants organizations to leave Windows PCs unpatched for weeks.

Microsoft recommends deploying Windows updates within three days

Windows updates are typically released twice a month: Patch Tuesday on the second Tuesday and an optional cumulative preview update during the last week of the month. Patch Tuesday updates are almost always installed automatically on consumer PCs, but you have the choice to defer them using Windows 11’s new calendar view for pausing updates.

IT admins, however, have greater control over Windows updates, particularly if they use Windows 11 Pro or Enterprise. You can use Group Policy Editor to delay updates if your organization is not prepared or you simply do not want to reboot all your devices once a month.

Whatever the reason may be, Microsoft is now warning against delaying security updates for an extended period.

While Microsoft will continue to offer greater control over Windows updates, it no longer recommends delaying them for more than three days.

If you choose to wait for a couple of weeks after vulnerabilities have been publicly documented, you are giving attackers ample time to exploit known gaps on your system using AI.

“To address this, we’ve updated our recommendations for deploying Windows updates to less than three days as the deferral period for quality updates,” Microsoft noted in a document spotted by Windows Latest. “Setting deadlines for those updates to zero or one day, and the update grace period to a maximum of two days.”

IT admins defer Windows updates because they can be buggy

It’s interesting that Microsoft won’t tell us why it has become common practice to defer Windows updates. The fact is that it’s largely because updates have been unstable lately, and the situation appears to be getting worse.

Let’s take the June 2026 cumulative update, which shipped on June 9, as an example. It wasn’t a deal-breaker for consumers, but if you used third-party apps that integrate with Office, you might not have been able to open Office apps.

Check Point, a third-party security company, confirmed that it was aware of issues with Office products following the June 2026 update.

“A new Office update has caused our injected code to dead lock which made Microsoft Office applications to sometimes freeze/crash,” a Check Point employee wrote in a forum post. “A new update will be released which will prevent the dead lock from happening, and will be deployed to versions 89.10, 89.20, 89.21 automatically in the next 24 hours.”

There have been reports of other problems as well, including issues with the Recycle Bin and a bug that blocks some users from installing the June 2026 update.

Regardless of the problems you run into, it’s still recommended that you install Windows Patch Tuesday updates because the security risks of waiting are only going to get worse.

Microsoft has been testing “hotpatching” for Windows 11 Enterprise, which allows some updates to install without reboots, but this feature isn’t yet available for consumers. It’s also unclear if hotpatching will ever be added to Windows 11 Home, but we can tell you that there’s no technical limitation preventing it.

At the end of the day, you need to install updates with or without reboots, and it’s better to do it sooner rather than later.

The post Microsoft admits AI is exploiting Windows 11 bugs in hours, warns against delaying updates past 3 days appeared first on Windows Latest