Releasing a security patch on Patch Tuesday is the best option as IT teams are aware that there will be a set of patches from Microsoft every second Tuesday of the month. Going out of band may spawn copycat attacks by people who reverse-engineer the patch, which could victimize more users.