Microsoft reflects on 20 years of Windows Patch Tuesday

[Alfonso Maruccia]

Why it matters: Every second Tuesday of the month, Microsoft releases a new batch of updates aimed at fixing critical security vulnerabilities in Windows and other company products. This tradition has been ongoing for two decades, and Microsoft is now properly celebrating this important milestone while highlighting how patches will continue for another 20 years, thanks to AI.

Microsoft's Patch Tuesday is 20 years old, and 1.4 billion monthly active Windows devices still require constant updates to keep users' data safe. The company's official Windows blog posted an abridged version of the Patch Tuesday and Windows security history, unveiling how the monthly patching initiative originated from Bill Gates himself.

Microsoft's former CEO and co-founder sent a company-wide email on January 12, 2002, announcing the Trustworthy Computing (TwC) initiative. Microsoft VP John Cable said that TwC represented a paradigm shift, pushing security teams to adopt a new approach to bug fixing and the entire security update process. In his email, Gates asked for a dramatic reduction in the number of security issues in Windows.

Customers should receive their security patches automatically, Gates wrote, and all Microsoft software should eventually have to become so "fundamentally secure" that customers would never have to worry about it. The TwC email marked the beginning of the Patch Tuesday tradition, Cable confirms, which was later adopted by other major companies as a well-known industry standard for software security.

Cable listed the most important highlights from the "20-year tenure of Patch Tuesdays," noting how the new patch management processes brought Windows Update and Microsoft Update services to life. Subsequently, Windows Vista and Windows 7 were released with enhanced security features, including the User Account Control, Windows Defender, and improved firewall APIs.

Throughout the years, Microsoft also introduced out-of-band (OOB) updates to address imminent and dangerous threats such as the Conficker worm, new best practice sets and guidelines, and new tools for organization-wide patch deployment such as Windows Server Update Services (WSUS) and Microsoft Baseline Security Analyzer (MBSA).

The next few years brought Windows 8 security features such as Secure Boot, and Windows 10 introduced yet another fundamental shift with its "Windows as a service" model. Microsoft is now focused on the "quality and reliability" of its security updates, Cable noted, working proactively to improve transparency and align with the EU's General Data Protection Regulations (GDPR).

The latest improvements to Windows security and monthly patch deployment include "industry-wide collaboration" on firmware patching, the use of machine learning to optimize Windows updates, and new patch experiences and rollback features.

Patch Tuesday must continue to be predictable, simple, agile, and transparent, Cable stated, while AI technology ensures that Windows will stay protected and productive for the next 20 years.

This month's Patch Tuesday is expected to arrive on November 14.

Permalink to story.

https://www.techspot.com/news/100804-microsoft-reflects-20-years-windows-patch-tuesday.html

 

[scavengerspc]

When I started my firm in the early 90s, I had a total of 12 PCs.
Now we have 76. In those years, the only problems I had were numerous broken printer drivers that needed to be reinstalled\updated and broken external drive drivers a few times.

Now it is going to be turned over to AI?
If I read that right, I'm setting to delay all patches, on every PC, until we verify there are no widespread problems.

 

[RudyBob]

I have so many finer things to reflect on

 

[BuckarooBonzaii]

"...all Microsoft software should eventually have to become so "fundamentally secure" that customers would never have to worry about it. "

Never say never. There is someone always smarter than you is how you should think to not become complacent.

 

[bondflavor]

Because this article, or at least the sub-heading, seemed to be giving the bizarre impression that Microsoft had announced that AI was going to be writing Windows patches, I actually clicked on the source link and investigated.

A Ctrl+F search for "AI" only brought one relevant AI-related result, which states this, under the section titled "2018 - present:"

• The use of machine learning optimizes Windows update experiences as proactive measures across Windows updates continue. AI becomes a tool to serve Windows 10 feature updates.

If you click on that link, you're taken to an article from 2018 about AI powering a rollout of an update to Windows 10, not the update code itself.

That subheading miiiiiiiiiiiight be considered click-bait.

 

[VaRmeNsI]

They've also been posting more left wing content lately as well, I guess nothing good lasts forever.

 

[Uncle Al]

Amazing .... if MicroSludge would do it right the first time there would be a LOT less patches ....

 

[Underdog]

Amazing .... if MicroSludge would do it right the first time there would be a LOT less patches ....

I've been thinking that for years.

 

[loki1944]

When I started my firm in the early 90s, I had a total of 12 PCs.
Now we have 76. In those years, the only problems I had were numerous broken printer drivers that needed to be reinstalled\updated and broken external drive drivers a few times.

Now it is going to be turned over to AI?
If I read that right, I'm setting to delay all patches, on every PC, until we verify there are no widespread problems.

Good call.

 

[loki1944]

Everyone is not really ignorant enough to keep acting like this is actually AI right? It is not remotely self aware; it's an if this then that script with branches and sequels without independent though or cognitionn of itself.

 

[OortCloud]

I think MS deserve a round of applause for managing to shoehorn the buzzword of the year - AI - into even this topic, knowing full-well that Windows Update has (and will continue for quite a while) f**k-all to do with it.