Microsoft's 'atypical' emergency Windows patches are becoming awfully typical
(2026/02/02)
- Reference: 1770024609
- News link: https://www.theregister.co.uk/2026/02/02/microsoft_quality_control/
- Source link:
Opinion Microsoft has had a bad start to the year. Two out-of-band updates in the weeks after the first Patch Tuesday of 2026 rattled administrators' already shaky faith in the company. But are things getting worse?
According to Register readers, and the company's own [1]release health dashboard, the answer has to be yes. It isn't just you. The frequency of emergency out-of-band releases for the company's operating systems has been rapidly increasing to the point where, for every Patch Tuesday update, there'll likely be at least one out-of-band patch to fix whatever got broken.
To be fair to Microsoft, it is also more than capable of emitting out-of-band releases when it finds things have been broken that were not part of the Patch Tuesday cadence.
[2]
Microsoft [3]states that out-of-band releases "are used in atypical cases, such as security vulnerabilities or a quality issue, when devices should be updated immediately instead of waiting for the next monthly quality update release."
[4]
[5]
We asked Microsoft Copilot what "atypical" meant. It responded: "The word 'atypical' simply means not typical – something that is unusual, irregular, or out of the ordinary."
As opposed to "something that seems to be happening quite a lot lately."
[6]
In [7]April 2025 , Windows Server 2022 got an out-of-band update. It was soon [8]joined by Windows Server 2025 . May last year was a busy month for the Microsoft bork fairy as multiple out-of-band updates were released for the company's desktop as well as its server products, and so it goes on.
Even Windows 10, the general demise of which was announced last year, has continued to require out-of-band updates, despite the ending of free support. With much fanfare, Microsoft pulled the plug on many versions in October, but offered the olive branch of Extended Security Updates. However, with every update since, the company has had to follow up with at least one fix.
While it is important not to mix causation and correlation, it is difficult not to note that the current spate of emergency updates has coincided with Microsoft laying off thousands of employees and CEO Satya Nadella [9]boasting that more than 30 percent of the company's code was the result of AI contributions.
[10]
That Microsoft rapidly pushes out fixes is a good thing. That stuff got broken in the first place is not so good. And certainly it's not good for the legions of administrators tasked with managing fleets of Windows devices and virtual machines. Since there is a very good chance that a critical security update might break something and be followed by an out-of-band release (some unkind wags have begun referring to the depressingly regular fixes as OOPs rather than OOBs), many administrators could be tempted to hold off installing a critical security patch for fear that it might result in an unfortunate event.
[11]Microsoft Azure OpenAI Service takes an unscheduled day off in Sweden
[12]Office zero-day exploited in the wild forces Microsoft OOB patch
[13]Microsoft probes Windows 11 boot failures tied to January security updates
[14]Microsoft rushes out another fix for cloud storage after January update
Reg reader Chris Hill said: "The out-of-band updates mainly complicate the risk assessment of patch timing – whether to leave your company at risk of cyberattack by waiting to patch – or whether to press on, knowing that productivity could also be impacted by a showstopper issue in the update."
Hill also noted that the potential productivity loss could be huge, "both in terms of people trying to work with the bugs themselves (from the bad patch) and the installation and reboot time required for users and infrastructure."
The faffing around with administrative tools, the reboot time, and everything else associated with an out-of-band update all mount up, particularly given the millions (or more) of Windows devices worldwide.
We asked Microsoft whether its testing regime had changed over the last year and if it had been making greater use of AI tools in its development processes, but the company has yet to share anything.
For a business keen to promote the productivity gains from its AI tools, such as Copilot, the loss of user productivity caused by the increasing frequency of emergency patches to fix whatever was broken by a previous update is less than ideal.
As administrators deal with two emergency updates in the weeks since January 2026's Security Update, [15]the words of Microsoft's CEO – "2026 will be a pivotal year for AI" – will be greeted more with dread than anticipation. ®
Get our [16]Tech Resources
[1] https://learn.microsoft.com/en-us/windows/release-health/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-monthly-updates-explained/3773544
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://support.microsoft.com/en-gb/topic/april-11-2025-kb5058920-os-build-20348-3561-out-of-band-6de61ab1-c7f8-4ee3-bc17-eadcfcbdb2c7
[8] https://support.microsoft.com/en-gb/topic/april-16-2025-kb5059087-os-build-26100-3781-out-of-band-28af76fc-36e5-49bc-9447-201cfadd9d97
[9] https://www.theregister.com/2025/04/30/microsoft_meta_autocoding/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2026/01/28/azure_openai_service_sweden/
[12] https://www.theregister.com/2026/01/27/office_zeroday_exploited_in_the/
[13] https://www.theregister.com/2026/01/26/microsoft_probes_windows_11_boot/
[14] https://www.theregister.com/2026/01/26/microsoft_outofband_patch/
[15] https://www.theregister.com/2026/01/02/microsoft_ceo_satya_nadella_calls/
[16] https://whitepapers.theregister.com/
According to Register readers, and the company's own [1]release health dashboard, the answer has to be yes. It isn't just you. The frequency of emergency out-of-band releases for the company's operating systems has been rapidly increasing to the point where, for every Patch Tuesday update, there'll likely be at least one out-of-band patch to fix whatever got broken.
To be fair to Microsoft, it is also more than capable of emitting out-of-band releases when it finds things have been broken that were not part of the Patch Tuesday cadence.
[2]
Microsoft [3]states that out-of-band releases "are used in atypical cases, such as security vulnerabilities or a quality issue, when devices should be updated immediately instead of waiting for the next monthly quality update release."
[4]
[5]
We asked Microsoft Copilot what "atypical" meant. It responded: "The word 'atypical' simply means not typical – something that is unusual, irregular, or out of the ordinary."
As opposed to "something that seems to be happening quite a lot lately."
[6]
In [7]April 2025 , Windows Server 2022 got an out-of-band update. It was soon [8]joined by Windows Server 2025 . May last year was a busy month for the Microsoft bork fairy as multiple out-of-band updates were released for the company's desktop as well as its server products, and so it goes on.
Even Windows 10, the general demise of which was announced last year, has continued to require out-of-band updates, despite the ending of free support. With much fanfare, Microsoft pulled the plug on many versions in October, but offered the olive branch of Extended Security Updates. However, with every update since, the company has had to follow up with at least one fix.
While it is important not to mix causation and correlation, it is difficult not to note that the current spate of emergency updates has coincided with Microsoft laying off thousands of employees and CEO Satya Nadella [9]boasting that more than 30 percent of the company's code was the result of AI contributions.
[10]
That Microsoft rapidly pushes out fixes is a good thing. That stuff got broken in the first place is not so good. And certainly it's not good for the legions of administrators tasked with managing fleets of Windows devices and virtual machines. Since there is a very good chance that a critical security update might break something and be followed by an out-of-band release (some unkind wags have begun referring to the depressingly regular fixes as OOPs rather than OOBs), many administrators could be tempted to hold off installing a critical security patch for fear that it might result in an unfortunate event.
[11]Microsoft Azure OpenAI Service takes an unscheduled day off in Sweden
[12]Office zero-day exploited in the wild forces Microsoft OOB patch
[13]Microsoft probes Windows 11 boot failures tied to January security updates
[14]Microsoft rushes out another fix for cloud storage after January update
Reg reader Chris Hill said: "The out-of-band updates mainly complicate the risk assessment of patch timing – whether to leave your company at risk of cyberattack by waiting to patch – or whether to press on, knowing that productivity could also be impacted by a showstopper issue in the update."
Hill also noted that the potential productivity loss could be huge, "both in terms of people trying to work with the bugs themselves (from the bad patch) and the installation and reboot time required for users and infrastructure."
The faffing around with administrative tools, the reboot time, and everything else associated with an out-of-band update all mount up, particularly given the millions (or more) of Windows devices worldwide.
We asked Microsoft whether its testing regime had changed over the last year and if it had been making greater use of AI tools in its development processes, but the company has yet to share anything.
For a business keen to promote the productivity gains from its AI tools, such as Copilot, the loss of user productivity caused by the increasing frequency of emergency patches to fix whatever was broken by a previous update is less than ideal.
As administrators deal with two emergency updates in the weeks since January 2026's Security Update, [15]the words of Microsoft's CEO – "2026 will be a pivotal year for AI" – will be greeted more with dread than anticipation. ®
Get our [16]Tech Resources
[1] https://learn.microsoft.com/en-us/windows/release-health/
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://techcommunity.microsoft.com/blog/windows-itpro-blog/windows-monthly-updates-explained/3773544
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[6] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[7] https://support.microsoft.com/en-gb/topic/april-11-2025-kb5058920-os-build-20348-3561-out-of-band-6de61ab1-c7f8-4ee3-bc17-eadcfcbdb2c7
[8] https://support.microsoft.com/en-gb/topic/april-16-2025-kb5059087-os-build-26100-3781-out-of-band-28af76fc-36e5-49bc-9447-201cfadd9d97
[9] https://www.theregister.com/2025/04/30/microsoft_meta_autocoding/
[10] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33aYCD0hGB8DOhkrG6Qf-e-gAAARU&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[11] https://www.theregister.com/2026/01/28/azure_openai_service_sweden/
[12] https://www.theregister.com/2026/01/27/office_zeroday_exploited_in_the/
[13] https://www.theregister.com/2026/01/26/microsoft_probes_windows_11_boot/
[14] https://www.theregister.com/2026/01/26/microsoft_outofband_patch/
[15] https://www.theregister.com/2026/01/02/microsoft_ceo_satya_nadella_calls/
[16] https://whitepapers.theregister.com/
Re: " the [..] administrators' already shaky faith in the company"
ComputerSays_noAbsolutelyNo
... and on their personal devices, the IT guys run anything but Windows. Because they know the quality of micros~1's warez.
And ?
JimmyPage
If this is a problem for people then they should use something else to run their kit. I mean it's not like it's 2000 when MS were still growing.
If you use MS then this is your life from now on.
I am getting a a little narked that this is being treated as news rather than business as usual. I mean do I open my copy of "The Times" to read about it being hot in Africa and cold in Antarctica ?
If El Reg is going to report on these expected fails, then it would be interesting to see how many man-decades it costs industry. I mean forget Trumps tariffs, MS could wipe 10% off your turnover in one day.
" the [..] administrators' already shaky faith in the company"
It's funny (not really) how Microsoft has an iron grip on anyone who doesn't actually have to face its failures on a daily basis.
Windows really is good enough for home users - they're basically incompetent and only surf the web, read/write mails and maybe watch films. That's fine.
For business users, you've got three types : the grunts, the managers and the IT guys.
The grunts don't care, if there is an issue, they call IT and go get a coffee until it's fixed.
The managers don't care, they just shout into the phone and complain unitl it's fixed.
The IT guys bear the brunt of Redmond's incompetence. They sweat and swear and fix things as best as possible, but until the beancounters start tallying the costs of Borkzilla's failures, management won't care and won't change.