Microsoft Urges Faster Windows Patching

I have been warning about the need to patch quickly since at least TOP STORIES #176 ↗ (opens a new tab) . In #184 ↗ (opens a new tab) I tackled the uncomfortable choice between patching and the problems patches can bring..... and repeated the warning in #188 and #189.

Microsoft is now reinforcing that message..... AI has changed the stakes completely.

In its 5 November warning, Microsoft explains that AI helps defenders find vulnerabilities faster, but also helps attackers analyse published fixes and develop exploits, potentially within HOURS.

Once a patch appears, the bad guys can study what changed and work out how to attack machines still waiting for it.

For IT people like me, who have been in the game a long time, this is counterintuitive. Years of troublesome updates taught a fairly understandable habit..... wait a little, let the problems emerge, then deploy once things have settled down.

BUT..... that waiting period also gives AI-assisted attackers an opportunity!

Yes, patches can break applications, destabilise drivers and create an impressive amount of extra work. However, when a serious vulnerability leaves your business exposed, dealing with those problems may be considerably less painful than dealing with ransomware, stolen information and a business that cannot operate.

As I warned in #184 ↗ (opens a new tab) ..... sometimes installing the update that breaks things is necessary because NOT installing it could break a lot more!

Check known issues, confirm recoverable backups, test a representative group promptly and deploy in controlled waves. Complete the required restarts and verify that the protection is actually installed. Any unavoidable delay needs temporary protection, a named owner and a deadline.

The old patching habits need reviewing..... the bad guys have already upgraded theirs!