MS Urges Timely Installation of Windows Updates
MS no longer wants users to delay Windows updates and install them at their convenience. This shift in policy is largely driven by the increasing use of AI by attackers to exploit vulnerabilities in Windows 11. To counter this, MS strongly advises that updates should not be delayed for more than three days.
Previously, MS addressed fewer than 100 security issues during Patch Tuesday updates. However, this trend has changed significantly. For instance, the number of patches has steadily increased over the months: 64 in February, 81 in March, 169 in April, 120 in May, and a staggering 206 in June 2026.
While the growing number of fixes might suggest increased vulnerabilities, it does not necessarily mean Windows has become less secure. According to a MS 365 director, attackers are leveraging AI to locate vulnerabilities in unpatched systems. On the flip side, MS is also employing AI to detect and address these issues. This underscores the importance of staying vigilant and updating systems promptly.
Why Delaying Updates Is No Longer Safe
Jeremy Chapman, a director at MS 365, cautioned against delaying updates, a practice that has been common among both consumers and organizations. “The risk is real,” Chapman emphasized. “Total addressed vulnerabilities have been on the rise since April this year.”
MS Leverages AI to Combat Security Threats
AI has become a double-edged sword in cybersecurity. While attackers use AI to identify and exploit vulnerabilities, MS is countering these efforts with its own AI system called MDASH. This system integrates over 100 AI agents and utilizes both advanced and smaller AI models to scan Windows code for suspicious patterns.
MDASH employs a collaborative approach where agents debate and diagnose potential issues. It is particularly effective for identifying complex bugs that span multiple functions or source files. For example, MDASH detected a remotely exploitable use-after-free vulnerability in tcpip.sys, which involved intricate operations such as object ownership and attacker-controlled packets.
According to MS, MDASH has achieved an impressive 88.45% success rate, which suggests that future Patch Tuesday updates may include even more fixes as vulnerabilities are identified more efficiently.
Timely Updates: A Critical Recommendation
MS emphasizes the urgency of deploying updates within three days post-release. Once a vulnerability is publicly disclosed, attackers can use AI to develop exploits within hours. As a result, leaving systems unpatched for weeks is no longer a viable option.
Jeremy Chapman shared updated guidelines with IT administrators: “We’ve updated our recommendations for deploying Windows updates to less than three days as the deferral period for quality updates. Set deadlines for those updates to zero or one day, and the update grace period to a maximum of two days.”
Typically, Windows updates are released twice a month: Patch Tuesday on the second Tuesday and an optional cumulative preview update during the last week of the month. Consumer PCs usually install these updates automatically, but Windows 11 now offers a calendar view to pause updates temporarily. IT administrators, especially those using Windows 11 Pro or Enterprise, have more control and can utilize tools like Group Policy Editor to manage update schedules.
Challenges with Windows Updates
Despite MS’s push for timely updates, many IT administrators choose to defer them due to concerns about stability. Recent updates have been criticized for causing issues. For example, the June 2026 cumulative update led to problems with third-party apps that integrate with MS Office, causing some Office applications to freeze or crash. Check Point, a third-party security company, confirmed these issues and announced updates to address them.
Other reported issues included bugs affecting the Recycle Bin and instances where the June 2026 update failed to install on certain systems. MS has acknowledged these problems and is working to improve the quality of updates. For instance, OEMs like Intel are now providing better-quality drivers, and MS CEO Satya Nadella has stated that the company will focus on improving fundamental aspects of Windows updates to regain user trust.
Future Improvements
MS is testing a new feature called hotpatching for Windows 11 Enterprise. This would allow some updates to install without requiring a system reboot. However, this functionality is not yet available for consumers.
Conclusion
While Windows updates can sometimes be problematic, the security risks of delaying them far outweigh the potential inconveniences. Installing Patch Tuesday updates promptly is essential to safeguard systems against evolving threats.
What About You?
Do you pause Windows updates? Personally, I only pause updates when I want to avoid interruptions during specific times, like when shutting down my PC before going to bed.
Windows Latest relies on readers like you. Make us your preferred source on Google Discover and Google Search to support our independent reporting.
