In the World of AI: Week of 5 May 2026, Microsoft Warns Patch Releases Will Keep Growing

AI is now finding software flaws fast enough that Microsoft is telling customers to expect larger and more frequent fixes, and ASIC has told financial firms to act on the same risk. The Federal Budget landed on 12 May with no AI-specific small business measure, and new Intuit figures show regular AI use is common but rarely central to how a business runs. Here is the week to 12 May 2026, with one step for each story.

1. Microsoft says patch releases will keep growing

Microsoft's Security Response Center published a note on 12 May 2026 saying that month's release was on the larger side and that future releases will keep growing for some time. It gives several reasons, including more vulnerability reports, better automation and wider use of AI to examine software. A larger share of that month's fixes came from Microsoft's own discovery work, including a multi-model AI scanning system. Microsoft says human developers and researchers remain central.

Why it matters: If AI helps attackers and defenders find bugs faster, the gap between a fix being released and a criminal using the flaw shrinks. Microsoft's advice includes staying current on supported products, reducing internet-facing exposure, using multi-factor authentication and separate admin accounts.

This week: Find out who applies updates on your computers, servers and routers, and set a regular day to check they have been installed.

2. ASIC tells financial firms to act on AI-driven cyber risk

On 8 May 2026 ASIC issued an open letter to financial services licensees and market participants saying frontier AI is intensifying cyber risk. A law firm summary of the letter lists the actions it asks for, including reviewing who has access to what, patching systems promptly, reducing exposure to untrusted networks, and keeping incident response and business continuity plans tested. It also asks firms to manage third-party risk.

Why it matters: The letter is addressed to licensees, so it is aimed at finance businesses that hold a licence. Any owner can still use the list as a sensible baseline, and the point about suppliers applies to everyone who relies on cloud tools.

This week: Write down your three most important systems, who can access each one, and who you would call if one went down.

3. Intuit: most small businesses use AI, few build it into operations

Intuit's Australian country manager wrote in an opinion column on 12 May that seven in 10 Australian small businesses use AI regularly, but only 12 per cent say it is central to how they operate. Among businesses that have built AI into daily operations, 76 per cent report better productivity and 40 per cent report higher revenue. The column names privacy concerns, limited knowledge of what AI can do and fear of getting it wrong as the biggest barriers. It cites survey responses from more than 3,700 Australian businesses but does not say which Intuit report supports which number.

Why it matters: The gap between occasional use and real integration is where most of the value sits. It is also where privacy worries bite, so a clear rule on what staff may paste into a tool helps.

This week: Ask each team member for one task they now do with AI and one they would like to, and compare the lists. Our answer on whether ChatGPT is safe for client data covers the privacy side.

4. The Budget makes the instant asset write-off permanent

Treasurer Jim Chalmers handed down the Federal Budget at 7.30 pm AEST on 12 May 2026. A tax adviser's summary published that day says the $20,000 instant asset write-off becomes a permanent feature of the simplified depreciation rules from 1 July 2026. It applies to small business entities with aggregated turnover up to $10 million, and the threshold is not expected to be indexed. The summary mentions no AI-specific measure.

Why it matters: Owners often ask whether government help exists for AI. This summary points to none, so the practical lever is the general write-off, which covers eligible depreciating assets such as equipment. This is general information only, so get advice on what qualifies.

This week: Ask your accountant which planned technology purchases for 2026-27 would count as eligible assets.

5. OpenAI launches a company to deploy AI inside businesses

On 11 May 2026 OpenAI launched the OpenAI Deployment Company, a majority-owned venture that places forward deployed engineers inside client organisations to build production AI systems. It launched with more than $4 billion of investment from a group led by TPG and says it has agreed to acquire the consulting firm Tomoro, with the deal subject to closing conditions.

Why it matters: OpenAI is putting engineers inside client organisations to build working systems, which shows it sees implementation as a separate job from selling access to a model. A small business is unlikely to be this company's client, but the same logic applies at any size. A tool pays off when someone owns making it work.

This week: For any AI tool you already pay for, name the person at your business responsible for making it useful. Our guide to auditing AI tool seats is a place to start.

What to do this week

• Assign someone to own software updates and set a weekly check.
• List your three critical systems, who can access them and who to call in an outage.
• Collect one AI use that works and one wish from each team member.
• Ask your accountant which 2026-27 technology purchases qualify for the write-off.
• Name an owner for each AI tool you pay for.

Sources

• Microsoft Security Response Center, "A note on this month's Patch Tuesday", 12 May 2026: microsoft.com
• ASIC, "Open letter to AFS licensees and market participants" (26-092MR), 8 May 2026: download.asic.gov.au
• Regulation Tomorrow, "ASIC urges immediate cyber resilience measures amid rising AI-driven threats", law firm summary of the 8 May letter, published 15 May 2026: regulationtomorrow.com
• Accountants Daily, "The AI confidence gap holding Australian small businesses back", 12 May 2026: accountantsdaily.com.au
• Pitcher Partners, "Federal Budget 2026-27 business measures", 12 May 2026: pitcher.com.au
• Advent International, "OpenAI launches the OpenAI Deployment Company to help businesses build around intelligence", 11 May 2026: adventinternational.com