Microsoft’s New Update Controls and the Risks of Delaying

Microsoft has introduced new features that allow users to pause Windows updates for up to 35 days at a time. This change comes in response to numerous complaints from users who found themselves forced to install updates during inconvenient moments, such as during important meetings or critical tasks.

Aria Hanson, strategic innovator at Microsoft, highlighted the feedback received from users, stating: "We are continually reading the feedback submitted about the Windows update experience. Personally, I've had the opportunity to read over 7,621 direct verbatim over the last few months." She added that the main concerns were the disruption caused by untimely updates and the lack of control over when they occur. The new changes aim to give users more control while still ensuring devices remain secure.

Despite these improvements, experts warn that delaying updates can lead to serious security risks. Alex Thompson, a tech expert and Windows specialist at The Computer Portal, explained: "Microsoft is essentially handing users a 'snooze button' that they can hit indefinitely, which creates some serious security blind spots."

Security Risks of Indefinite Delays

When users postpone updates for extended periods, they are running Windows with known vulnerabilities that cybercriminals are already exploiting. The average time between a security patch release and active exploitation is now just 14 days. A user who delays updates for six months could be running software with 12+ unpatched security holes that hackers have detailed maps for.

There are several types of updates that Microsoft pushes out:

• Security Updates – Critical patches that fix vulnerabilities hackers could exploit. These are typically released monthly and should be installed as soon as possible.
• Feature Updates – Larger updates that introduce new tools, design changes, and system improvements. Usually rolled out once a year.
• Quality Updates (Cumulative Updates) – Regular maintenance updates that fix bugs, improve performance, and bundle previous fixes into one install.
• Driver Updates – Updates that improve communication between Windows and hardware like graphics cards, printers, and peripherals.
• Optional Updates – Non-essential updates, including preview fixes or additional drivers, that you can choose whether or not to install.
• Out-of-Band Updates – Urgent fixes released outside the normal update schedule to address unexpected or critical issues.
• Zero-Day Updates – Emergency patches for vulnerabilities already being actively exploited or publicly exposed.

Zero-day updates are the most time-sensitive and should be installed immediately.

Kevin Marriott, Director of Cyber Content Strategy and IP at Immersive, told GB News: “The moment a patch is released, the vulnerability is no longer a 'Zero-Day' (unknown); it becomes a 'N-Day' (known). Often, threat actors then analyse the patch to reverse engineer it and see exactly what code was changed. As a result, Windows users essentially leave an 'attack here’ sign for attackers. In 2026, the time-to-exploit has shrunk, and often, functional malware for a new patch is circulating on dark web forums within hours of the update's release.”

The Importance of Timely Patching

Microsoft has recently released emergency fixes for various issues, including a frustrating false sign-in glitch on their PCs. Andy Ward, SVP International at Absolute Security, emphasized the importance of timely patching: "Delaying Windows 11 updates creates a serious cyber resilience risk because patching is no longer technical housekeeping; it is one of the most important ways to prevent serious cyber incidents and operational downtime."

According to a recent report, critical OS patching across PCs running Windows 10 and 11 is already behind by an average of 256 days, a sharp increase from just 56 days the year before. This means many organizations are operating with a significant vulnerability window, leaving devices exposed to zero-day attacks, ransomware, credential theft, and other threats.

How to Install Windows 11 Updates

If you do have a pending Windows 11 update that you'd like installed, follow these steps:

• Click the Start menu (Windows icon).
• Open Settings.
• Go to Windows Update (bottom of the sidebar).
• Click Check for updates.
• If updates are available: Click Download & install.
• Restart your PC if prompted.