In essence the spam definitions are updated in near-real time. The definitions come from multiple sources as well as customer submitted information (releasing mail from the quarantine or submitting mail as spam).
← How often are spam and anti-virus definitions updated?