Surely, the majority of you who are interested in both technology and freedom will recall the Sony Rootkit Debacle which is not actually over yet, but is all but. One of the more interesting aspects of this was the interest of the DHS, or Department of Homeland Security. This euphemistically-named division of our government is tasked with protecting the US against terrorists, both domestic and foreign, but they are also concerned with an area normally left to the NSA: the safety of our communications.
The DHS' interest stems from the fact that the Sony rootkit could be (and was) used to hide other pieces of malware, and thus the rootkit was considered a threat to communications. So it actually comes as little surprise that they are now "instructing" us to update windows XP, specifically the patch for bulletin MS06-040, Vulnerability in Server Service Could Allow Remote Code Execution (921883). This is a remote code execution exploit involving all currently-supported versions of Windows NT (Windows 2000 and newer.)
It's interesting that the DHS is getting involved in keeping windows up to date. What are they going to do if I don't follow their mandate? Will they send someone around to update my machine, and fine me?
Regardless, you can as always update Windows XP from http://windowsupdate.microsoft.com.