News

No Microsoft Security Patches Expected This Month

Get ready for an anti-climactic Patch Tuesday. Following on the heels of last month’s gonzo Patch Tuesday event -- wherein Microsoft Corp. released 12 new patches -- Redmond this month doesn’t plan to patch any security-related flaws.

Zero. Nada. Zilch. This is in spite of the fact that Microsoft has already confirmed the existence of at least one extant Word zero-day exploit, which surfaced shortly after last month’s Patch Tuesday festivities. In a posting last month on Microsoft’s Security Research Center Blog, researcher Alexandra Huft confirmed that Redmond was investigating the vulnerability.

The probable non-appearance of a patch at this time is hardly without precedent, of course: The first of four Word zero-day exploits came to light in early December of 2006, followed by the appearance of three others through January and February; it wasn’t until Feb. 13 (Patch Tuesday), however, that Microsoft issued patches for them.

Thursday's advance notification isn't always the last word in Patch Tuesday deliverables, either In January, for example, Microsoft yanked several promised Windows patches from its Patch Tuesday payload. The company has also been known to add patches at the last minute.

"Microsoft occasionally has months when it has not released security updates," commented a Microsoft spokesperson via e-mail. "The last time Microsoft did not offer security updates as part of its monthly update cycle was September 2005."

"There are many factors that impact the length of time between the discovery of a vulnerability and the release of a security update, and every vulnerability presents its own unique challenges," read another part of the e-mailed statement.

Redmond does plan to release two non-security high-priority updates on Windows Update (WU) and Software Update Services (SUS); and four non-security high-priority updates on Microsoft Update (MU) and Windows Server Update Services (WSUS). Microsoft is also prepping still another update for its Windows Malicious Software Removal Tool on Tuesday. That update will be available via WU, MU, SUS and WSUS.

About the Author

Stephen Swoyer is a Nashville, TN-based freelance journalist who writes about technology.

Featured

  • Broadcom Revamps VMware Partner Program Again

    Broadcom recently announced a significant update regarding its VMware Cloud Service Provider (VCSP) program, coinciding with the release of VMware Cloud Foundation (VCF) 9.0, a key component in Broadcom’s private cloud strategy.

  • Closeup of the new Copilot keyboard key

    Microsoft Updates Copilot To Add Context-Sensitive Agents to Teams, SharePoint

    Microsoft has rolled out a new public preview for collaborative "always on" agents in Microsoft 365 Copilot, bringing enhanced, context-aware tools into Teams channels, meetings, SharePoint sites, Planner workstreams and Viva Engage communities.

  • Windows 365 Cloud Apps Now Available for Public Preview

    Microsoft announced this week that Windows 365 Cloud Apps are now available for public preview. This aims to allow IT administrators to stream individual Windows applications from the cloud, removing the need to assign Cloud PCs to every user.

  • Report: Security Initiatives Can't Keep Pace with Cloud, AI Boom

    The increasingly fast adoption of hybrid, multicloud, and AI systems is easily outgrowing existing security measures, according to a recent global survey by the Cloud Security Alliance (CSA) and exposure management firm Tenable.