KB5017383Broken

Preview update accidentally pushed to WSUS, expires security updates

What broke

Microsoft accidentally published a preview update to WSUS (Windows Server Update Services), the enterprise update management system. Organizations with auto-approve or auto-decline rules had their security update deployment policies corrupted — critical security patches were expired before they could be deployed. Preview updates are optional and never supposed to reach WSUS. Microsoft’s quality control failed at the distribution level: the update itself might have been fine, but shipping it through the wrong channel broke enterprise security patching workflows across organizations worldwide.

Sources

  1. BleepingComputer: KB5017383 incident report

Related Windows update incidents