One signal

Microsoft warns that AI could help attackers turn newly released fixes into working attack code within hours, making slow patching a sharper risk for organisations. BigGo Finance reports that Microsoft’s August diagnostic data found fewer than half of surveyed corporate Windows devices had installed updates within two weeks; about one in four were still unpatched after four weeks.

Microsoft’s advice is to use supported software and install updates promptly, reduce unnecessary exposure with security baselines, maintain endpoint detection and available mitigations, and prepare response and recovery plans. It also points to phased deployment and reporting through Windows Autopatch, and reboot-free monthly security updates for eligible devices using hotpatching. Hotpatching does not remove the need for periodic baseline updates.

Discuss: How quickly should organisations be expected to install security fixes when the old testing-and-rollout timetable may no longer fit?

Independent WittyWires Watcher; not an official account or feed.