Microsoft released a record number of security patches for Windows, Office, and other tech product lines this week, citing the use of AI to aid the discovery of code vulnerabilities.

The technology and cloud giant issued patches for 570 security flaws on Tuesday as part of its monthly scheduled release of fixes, which security researchers have long dubbed “Patch Tuesday.”

At least two of the vulnerabilities are classified as zero-days, meaning that they were exploited before Microsoft was made aware of them. One bug affecting Windows Server allows hackers to escalate their privileges from a limited user to a system administrator. Another bug affects the SharePoint file sharing server — the U.S. government’s cybersecurity agency CISA has warned hackers were actively exploiting the bug to compromise organizations.

Krebs on Security first reported the news.

The huge patch update comes a week after Microsoft said in a blog post that it expected its usual batch of monthly security patches to be far higher in number than before. The company cited its use of AI to help its employees uncover previously undiscovered security bugs in its software.

“As AI helps defenders discover more issues, customers will see a higher volume of security updates included in each security release,” said Windows boss Pavan Davuluri.

As AI models become more advanced and focused on cybersecurity issues, security researchers are using them to uncover vulnerabilities that may have been dormant in software code for years, if not longer. Parts of Microsoft’s Windows code dates back decades.

Livestream shopping app Whatnot announced Wednesday that it has acquired Shaped, a machine learning company that specializes in real-time recommendation and search systems. The deal is meant to strengthen Whatnot’s discovery and personalization capabilities as the platform continues to expand across new product categories and millions of buyers.

According to the company, the acquisition helps Whatnot continue its investment in AI as it looks to solve one of live commerce’s biggest challenges: helping shoppers find the right products while inventory, auctions, and buyer demand change in real time. 

Unlike traditional e-commerce platforms, where product catalogs remain relatively stable, Whatnot’s marketplace is constantly evolving, and live auctions can end within minutes or last for hours.

“By combining Shaped’s technology with Whatnot’s existing systems, we can make recommendations faster, more responsive, and more personalized,” Emmanuel Fuentes, VP of Data and AI at Whatnot, told TechCrunch. “That speed matters because live commerce is a uniquely hard recommendation problem. Inventory changes by the second, shows start and end continuously, and buyer intent shifts throughout a show.”

Fuentes said the company has spent the last six years improving the speed of its recommendation engine, reducing recommendation latency from roughly a day to just minutes. Integrating Shaped’s technology is expected to push those recommendations even closer to real time. The company says its systems process more than 500,000 hours of live video and millions of real-time interactions every week, using that data to continuously improve recommendations.

Founded to help businesses build AI-powered recommendation systems, Shaped developed technology that combines existing customer data with large language models and machine learning to deliver highly personalized search and discovery experiences. Its customer roster included companies such as Outdoorsy and QVC.

As part of the acquisition, Shaped founder and CEO Tullie Murrell, along with nearly a dozen engineers and AI researchers, will join Whatnot. Murrell will lead the company’s newly formed Applied AI Research group. (Notably, Murrell worked at Meta before launching Shaped.)

The acquisition comes as Whatnot experiences significant growth. Launched in 2019, the company recently revealed that sellers have surpassed 1 billion orders. Last year, Whatnot raised $225 million in Series F funding, giving the company a valuation of more than $11 billion after adding 20 million buyers over the past year.

Whatnot has also significantly broadened its marketplace, launching more than 35 new categories last year — including art, golf, and vinyl — and more than 45 additional categories during the first half of 2026, with new subcategories continuing to roll out each month.

Additionally, the move comes as resale giants race to integrate AI throughout their platforms, such as eBay and Poshmark. 

This story has been updated to correct dates that incorrectly referred to the first half of 2025. The correct time period is the first half of 2026

The AI music generator Suno was hacked, according to a report from 404 Media.

The hacker told the publication that they used a supply chain attack in November to access an employee’s credentials, allowing them to then access source code showing how Suno allegedly scraped decades of audio from YouTube Music, Deezer, Genius, stock music libraries, and podcast RSS feeds.

Suno previously admitted that it trains its AI on “publicly available music files” on the open internet, arguing that it can train on copyrighted material under the fair use doctrine, a subjective carve-out of copyright law. But according to the major record labels actively suing Suno, it is illegal under the Digital Millennium Copyright Act (DMCA) to deliberately circumvent YouTube’s protections against data scraping; it also violates YouTube’s terms of service.

Udio, a competitor to Suno, has also been accused of scraping YouTube data. Google, the parent company of YouTube, faces similar allegations of copyright infringement from a variety of major book publishers.

The hacker reportedly accessed customer data including customer emails, phone numbers, and partial credit card numbers in Stripe.

Suno did not notify customers about the November 2025 breach and claims that this was a “limited security incident that was quickly contained.”