Microsoft implements security overhaul amid rising vulnerability counts

Microsoft is undergoing a significant security transformation through its Secure Future Initiative (SFI), launched in November 2023. The initiative aims to overhaul the company’s software development and security culture following several high-profile breaches, including attacks by the LAPSUS$ gang and state-sponsored actors from Russia and China.

Company leadership indicates that the SFI has reduced internal friction regarding security protocols, making security a “non-negotiable” aspect of product shipping. This cultural shift comes as the industry faces an increasing volume of vulnerabilities. Microsoft recently released a record-breaking security patch for Windows, addressing approximately 972 vulnerabilities, including 112 critical-severity issues.

The surge in patching is partly attributed to AI-powered vulnerability discovery. While AI assists defenders, industry leaders from companies including OpenAI, Anthropic, and Amazon Web Services have warned that the window for patching is narrowing due to the threat of AI-enabled attacks that can rapidly weaponize exploits.