AI-Driven Security Findings Delay Microsoft's Exchange CU1 Update

Microsoft's Exchange team has delayed the first Cumulative Update (CU1) for its Exchange Server Subscription Edition due to an influx of security findings surfaced through AI-assisted code scanning.

The update was initially expected to arrive by the end of the first half of 2026, but Microsoft is yet to offer a new timeline.

This marks the second delay for CU1, which represents a more substantial update to the server software and requires extensive testing before deployment.

Manoj Chandra Jha, principal analyst at Nord-IQ Research, suggests that enterprises should focus on tracking the monthly security update cadence as their operational patch baseline rather than waiting for a CU1 release date.