History of Windows/Microsoft updates question

It's Patch Tuesday again, and I have downloaded the updates.

I've been thinking about the history of Windows/Microsoft updates.
(a quick search didn't give me the answers I was looking for)

How does it usually work ? Are there exploits in the wild, being abused, and reported to Microsoft, which then comes up with a patch ?

Or is it also the case that Microsoft and security software companies do their own research, and discover vulnerabilities on their own ?

 

If this is true, then one wonders why the program was released with hidden bugs from the beginning? Is then the primary reason to force everyone to upgrade and pay millions of $$$ to the developers?

 

what I dont get with vista updates,I check for updates every few days or so and nothing.then sha bang 8 updates just tody.What does microsoft doe, save up for a while then send them all at there convenience.

 

It's called "Black Tuesday". It happens every 2nd Tuesday of the month. Sometimes we get lucky and there are no patches issued.

 

Dry Ronjor, very dry.

 

Ah I did not now that.Thanks innerpeace

 

I am aware of the patches need to be tested.I was just curious to why larger updates at once.I know now from innerpeace explaination how they go about It.

 

A little off topic: I've learned that there is a much smaller probability that patches cause problems if one does disable the active protection of ALL security software before downloading and installing the patches.

I'm behind a router, if you're not you could temporarily enable the Windows firewall.

 

Having updates available on a predictable day is convenient for people who are responsible for updating a lot of computers.

 

Software is complicated. People are imperfect. Developer knowledge varies. Software management attitudes vary. Software companies don't necessarily have incentives to produce defect-free products (see https://www.wilderssecurity.com/showthread.php?t=209880).

 

As a coder, I am infallible. If it doesn't work, that is because I was only given the specifications and I followed through them. In my case, software updates are released on a strict timeline. Delays are unacceptable.