Microsoft has now made it possible to receive notifications about new security updates through a new RSS feed for the Security Update Guide.
When Microsoft fixes a security vulnerability in one of its products, they disclose details in the
Security Update Guide (SUG).
Typically, Microsoft discloses new vulnerabilities twice a month, the bulk being the monthly Patch Tuesday and when Microsoft fixes vulnerabilities in Microsoft Edge.
However, if a new vulnerability is publicly disclosed before Microsoft can fix it and Microsoft believes it is important for customers to be aware, they will add new entries to SUG when releasing out-of-band advisories.
For example, last month, Microsoft added
two new Microsoft Exchange zero-day vulnerabilities tracked as
CVE-2022-41040 and
CVE-2022-41082 to the SUG.
While these bugs have not received any security updates yet,
Microsoft did release mitigations that can help protect Internet-exposed servers, illustrating the need to stay aware of new security issues.
While email notifications for additions to the Security Update Guide, they require a user to create a Microsoft account to receive them and are not sent immediately.
