Microsoft's Exchange Team Hits Another Roadblock with AI-Driven Code Scanning
Microsoft's Exchange team is facing delays in releasing the first Cumulative Update (CU1) for its Exchange Server Subscription Edition due to AI-assisted code scanning.
The company had initially planned to release CU1 by the end of the first half of 2026, but revised it to the second half. Now, with no new timeline provided, enterprises should stop waiting for a specific date and instead track monthly security updates as their operational patch baseline.
According to Manoj Chandra Jha, principal analyst at Nord-IQ Research, CU1 can be treated as a discrete project rather than a scheduled release until Microsoft provides a firmer signal. He suggests maintaining a test environment, inventorying and pre-validating authentication, APIs, and management tools, and establishing a fast-track change-approval process.
The delay is not unique to Microsoft's Exchange team, as other companies like GitHub and AWS have also struggled with the volume and quality of AI-generated code. GitHub introduced Stacked PRs in April to help developers manage larger changes, while AWS added release management features to its DevOps Agent in June.