Please go back and read the NH comments on the article you're referring to - the article was misleading, and there's a good explanation. In short, Microsoft informs many different major partners (both government and private) of security vulnerabilities before an official patch is issued so that sysadmins can be better prepared.