Dive Brief:
-
Microsoft will stop issuing detailed security bulletins next month, instead offering a new, single destination for security vulnerability information called the Security Updates Guide.
-
The company has issued the bulletins — which provide data about vulnerabilities and patches — since 1998.
-
Among other things, the new database will allow users to filter security vulnerabilities and update content by CVE, KB number, product, or release date, according to Microsoft.
Dive Insight:
A Microsoft blog explains that the company is making the change because "our customers have asked for better access to update information, as well as easier ways to customize their view to serve a diverse set of needs."
But not everyone agrees Microsoft is making the change for the good of its customers. In an interview with Computerworld, Chris Goetti, product manager with patch management vendor Shavlik, said the company is making the change out of necessity. Once it changed its patching practices with the release of Windows 10, it created a reporting and compliance discrepancy it was then forced to solve.