Microsoft Says Windows 11 Updates Should Not Be Delayed for More Than Three Days Because of AI
Microsoft has changed its advice about Windows 11 security updates. The company now says that both home users and businesses should not delay installing security patches for more than three days. The reason is the growing use of artificial intelligence, which allows attackers to study security flaws and create working attacks only hours after those flaws become public.
In the past, many businesses waited several days or even weeks before installing updates. This gave IT teams time to check for problems and make sure the updates did not break important software. Microsoft now believes that this waiting period has become too risky because a known security flaw can quickly turn into a real attack.
The number of security issues fixed by Microsoft has also increased during 2026. The company corrected 117 vulnerabilities in January, 64 in February, and 81 in March. The numbers then rose to 169 in April, 120 in May, and 206 in June. Microsoft says this does not necessarily mean Windows is becoming less secure. Instead, improved automated tools are helping find more problems than before.
Don’t Wait More Than Three Days to Update Windows 11
Microsoft is also using artificial intelligence to improve its own security work. The company created a system called MDASH, which combines advanced AI models with more than 100 specialized AI agents. These agents examine Windows code, search for suspicious patterns, and compare their findings with each other. Microsoft says the system correctly identifies real security flaws with an accuracy rate of 88.45%.
MDASH has already found several vulnerabilities in different Windows features and files. One of them affected tcpip.sys, a file that could be exploited remotely. The issue involved memory management, simultaneous operations, and specially crafted network packets, making it difficult to detect using traditional security methods.
For businesses, Microsoft now recommends delaying updates for less than three days. It also suggests setting installation deadlines of zero or one day, with a maximum grace period of two days. In other words, devices should receive security patches almost immediately after Patch Tuesday.
However, many organizations delay updates for a valid reason. Some recent Windows patches have caused problems, including Office crashes, Windows Recovery Environment (WinRE) issues, and serious Task Manager errors. Because of this, installing updates more quickly may increase the chance of running into bugs before official fixes are available.
