Security1 hOctober 8, 2026, 07:34

Microsoft FORGE: 140 Windows CVEs in five months via AI research

Microsoft Security detailed its FORGE program for AI-driven vulnerability discovery. From May to September 2026, 140 CVEs were addressed in Windows security releases, 52 of them in September, while 93 of 155 reports were accepted across 23 open-source projects.

DEV Community

Open source

Microsoft FORGE: 140 Windows CVEs in five months via AI research

140 CVEs fixed in Windows from May to September 2026, 52 in September
93 of 155 reports accepted across 23 open-source projects
PoC generation for 182 crashes on GPT-5.5 averaged $3.61 and 21.5 minutes
Privilege-escalation checks on 6 cases averaged $8.56 and 25.4 minutes

#Microsoft#Windows#GPT-5.5

Microsoft FORGE: 140 Windows CVEs in five months via AI research

Researchers forged RSA signatures without cracking the key

Study: Claude Sonnet 4.6 and GPT-5.5 Show Gender Bias in Moral Judgments, DeepSeek V4-Flash Doesn't

OpenAI finds self-replicating prompt injections that spread like worms

Codex runaway: one prompt spawned 826 agents and a $78,000 bill