Insiders see fix previews

Microsoft has been quietly allowing some firms to preview its monthly security patch bundles three business days before they are issued.

Under the scheme, firms sign a non-disclosure agreement to receive details about the number of bulletins, severity ratings and affected products.

Microsoft said the scheme helps firms to plan, and argued that the information would not harm security.

It added that firms have been able to sign up since April, expanding a similar deal for Premier customers that began in 2003. However, many security watchers said they were unfamiliar with the scheme. Microsoft declined to say how many firms have joined.

Graham Titterington of analyst Ovum said, "If the [preview] alert is too vague then it is of no real use, but if it is too explicit it will be exploited. However, firms will be pleased to enter the loop earlier."

For the latest news for IT professionals, visit ITWeek.co.uk