If you’ve not been offered any security updates since January there’s a reason. It appears that some Antivirus programs make unsupported API calls to Windows kernel memory that interfere with January’s updates (especially Meltdown and Spectre patches) and may lead to BSoDs (Blue Screen of Death). To protect customers Microsoft have stopped offering security updates to devices with unsupported AVs.
While waiting for a fix from AV vendors (and if you’re absolutely sure you know what you’re doing) you can temporarily disable the compatibility check. The fix is just a registry key:
Инсталирате операционна система (в моя случай Server 2008). Отваряте Windows Update и избирате “Search for updates”. След известно време получавате съобщение, че търсенето на обновления/кръпки е неуспешно и е завършило с код за грешка 0x80072F8F.