Content by taesoo kim (4)

Taesoo Kim shares what Microsoft Security’s FORGE Lab learned while scaling AI-assisted vulnerability research across Windows and major open-source projects, including how to turn agent-discovered bugs into reproducible evidence, validated fixes, and shipped security updates.

Taesoo Kim explains how Microsoft’s MDASH agentic scanning system moved from a benchmark win into real engineering workflows, feeding validated findings into Microsoft Defender, GitHub Advanced Security, and Azure DevOps. The post breaks down recent CVEs found across Windows and identity components, plus what pipeline changes improved results and what still fails.

Taesoo Kim introduces MDASH, Microsoft’s multi-model agentic scanning harness, and explains how it’s being used to find and validate real Windows vulnerabilities end-to-end. The post breaks down the pipeline stages (prepare/scan/validate/dedup/prove), shares benchmark results, and details 16 Patch Tuesday CVEs plus two technical deep dives.

Taesoo Kim announces MDASH, Microsoft Security’s multi-model agentic scanning harness, and explains how it uses specialized AI agents to find, validate, and prove vulnerabilities end-to-end. The post shares benchmark results, details 16 Patch Tuesday CVEs found in Windows networking/auth components, and includes two technical deep dives.