AI-Driven Vulnerability Surge Prompts Software Vendors to Revise Patch Strategies (heise.de)

• Cisco switches to bi-weekly updates with pre-release informational advisories.
• Mozilla patches weekly; Chrome updates every two weeks from v153; Adobe bi-weekly.
• Oracle releases monthly CSPUs; Microsoft June patch day had over 200 fixes.

"Major software vendors including Cisco, Mozilla, Google, Adobe, and Oracle are accelerating their patch cycles in response to a surge of vulnerabilities discovered by AI models. Cisco shifts to bi-weekly updates, introduces pre-release informational advisories, and plans to group similar vulnerabilities under umbrella CVE IDs. Mozilla now patches weekly, Google will update Chrome bi-weekly from version 153, and Adobe has adopted a bi-weekly schedule. Oracle releases monthly Critical Security Patch Updates. Microsoft's June patch day exceeded 200 fixes. The changes aim to manage the update flood but increase administrative burden."