ICYMI – Emergency patch has silver lining for Microsoft

Last week, Microsoft issued an emergency patch in response to a critical flaw discovered by Google’s Project Zero and FireEye. While critical flaws rarely have a silver lining, there’s a big one for Microsoft here. An emergency patch just a week after July’s Patch Tuesday is the perfect outlier for Windows Update for Business (WUB) and 24/7 patching, which will be introduced as part of the Windows 10 launch this week and rolled out to companies in the weeks and months ahead. Back when Patch Tuesday was first introduced, monthly updates were revolutionary. Today however, as demonstrated by this critical flaw, Patch Tuesday is far from the be-all and end-all of patch management. Indeed, this kind of out-of-band patch illustrates the critical need to update patching practices and tools to provide more continuous patching for Microsoft and third-party apps. Likewise, it also serves to highlight the immense value WUB represents to the enterprise, as well as how far the industry has shifted since Patch Tuesday first came onto the scene. While it’s been good that we’ve become conditioned to a regular cadence for patch, there remains the significant potential for vulnerabilities outside of fixed cycles. I don’t expect WUB to solve the problem of critical flaws, nor remove the need for emergency patches, but Microsoft and the software industry in general are certainly heading in the right direction. If you will be moving to Windows 10 soon and have any questions regarding OS migration or what Windows Update for Business means for your company, the HEAT Software team is happy to help. Why not check out some of our recent blogs or get in touch by phone or email.