"Patch Tuesday" is the 2nd Tuesday of each calendar month ..traditionally when MSFT posts security and other updates ..critical updates can come at anytime ..Look for the 'monthlies' around this date .. You can set WUD to notify versus automatically download, but this can get impractical if you're running windows defender AV , as the definition updates are daily 'updates' versus separately managed via WD .. and you might get hounded that this is a 'problem' ..unaware of any RSS feeds, etc ..