As part of a good cyber security plan, I always recommend using automatic updates with remote monitoring and management software in place to check things are really happening. (Our Operations Manager has just read this and wants me to add that some servers are exceptions to this rule and they will require managed updates and patches.) Anything that improves the effectiveness of automatic updates is welcomed, especially when that software is widely used such as Microsoft 365:
Microsoft 365 now auto-updates apps on locked or idle devices (bleepingcomputer.com)
Microsoft has developed their update delivery service to run even when a Microsoft 365 app is running, or the computer is idle or locked.
Clive Catton MSc (Cyber Security) – by-line and other articles
