Why? Microsoft stopped building Win8 in late June / early July.
Since then, they've had a ton of error messages back via Watson, external people have posted bugs, internal tests have found issues.
Should Microsoft leave those bugs open for people to exploit? Or should they patch them?
Security patches aren't a big deal. They're just fixing up bugs that have been found.