Microsoft releases most patches the second Tuesday of every month and Interim patches are released as available. Third parties provide security patches to their products and these are NOT released from Microsoft. You must have a great patch management strategy in place to make sure these are being applied; not failing and know how to roll back if a patch causes an issue for one of your applications.