Microsoft earlier this week quietly issued its first security update for one of its Windows 8/RT apps, patching a link-spoofing vulnerability in Mail. Two weeks ago, Microsoft spelled out plans for updating its own Metro apps, the programs that run in Windows 8's and Windows RT's tile-based UI. Then, Microsoft said it would issue security updates on the fly, not just on its regularly scheduled Patch Tuesday each month.