Microsoft will issue just two security updates next week, giving give IT admins time to prepare for an October update that invalidates all certificates with keys less than 1,024 bits long.