微软MDASH AI系统发现16个Windows漏洞
微软部署了一个名为mdash的自主系统,包含超过100个ai代理,发现了windows中16个新漏洞,其中4个是关键漏洞。
microsoft revealed the mdash (multi-model agentic scanning harness) system, designed to autonomously audit proprietary codebases like windows and azure that are absent from public training data. the system orchestrates more than 100 specialized agents across a five-stage pipeline, using 'debater' agents to contest vulnerability findings and 'evidence leaders' to generate proof-of-concept exploits. this process uncovered 16 new cves affecting the windows networking stack, with four rated critical due to unauthenticated remote code execution risks. mdash achieved a score of 88.45% on the cybergym benchmark, leading the leaderboard, though microsoft withheld details about the specific underlying models used.