Microsoft to Automate Hotpatch Security Updates for Windows Autopatch

Microsoft will change the default behavior of Windows Autopatch to automatically enable hotpatch security updates for eligible devices managed via Microsoft Intune or the Microsoft Graph API, starting with the May 2026 Windows security update. Windows Autopatch is a Microsoft-managed service that automates updates for Windows and Office, allowing IT administrators to pause or roll back updates if performance issues arise. The feature was introduced approximately one year prior to this change. No specific CVEs or technical eligibility criteria for devices were mentioned. The update impacts organizations using Microsoft’s automated patching solutions for enterprise environments.