One in Five Security Leaders Dodge Patch Tuesday as Update Workloads and Stress Climb

Patch Tuesday is the monthly date when Microsoft, Adobe and other vendors release security updates, and new research suggests it is taking a toll on the people who manage it. Managed detection and response provider Socura polled 500 UK security leaders, including CSOs, CISOs and heads of IT security. It found 22% have tried to avoid the date altogether, either by calling in sick or by deliberately booking holiday.

The survey also points to heavy workloads. Some 41% said they have worked overtime to manage the patching cycle, and 37% said they have worked late to deploy patches. Over a quarter (29%) reported "significant anxiety" the night before Patch Tuesday, and the same share said they become more irritable with colleagues or family that week. Socura blamed a growing number of patches and rising stress. Microsoft fixed a record 974 CVEs (publicly catalogued vulnerabilities) in its September 2026 release, up from the previous record of 570 just two months earlier. AI-powered vulnerability research is helping vendors find more flaws.

Socura CEO Andrew Kays said it is vital that security teams are properly resourced on Patch Tuesday and supported emotionally, technically and financially. The findings echo a March 2026 Seemplicity report, which found 45% of security leaders work 11 or more extra hours a week. The source notes that AI could also help make some parts of the job less stressful.