Managing updates without spending all day on it
Many attacks exploit vulnerabilities that vendors have already fixed. Applying updates quickly is therefore one of the most cost-effective measures, provided you get organised.
Kayzen Security editorial team3 min read
Why it matters so much
When a vendor publishes a security patch, it effectively reveals that a vulnerability exists. Attackers analyse these patches and then target devices that have not yet installed them. The time between publication and exploitation can be very short.
ANSSI's IT hygiene guide makes regular software updates one of its basic measures.
What to update first
- The operating system (Windows, macOS, Android, iOS) and the firmware (BIOS/UEFI) when the manufacturer releases it.
- The browser and its extensions: they are the most exposed entry point.
- Software that opens files from outside: office suite, PDF reader, email client, compression tools.
- Network equipment: internet box, router, VPN, NAS, often forgotten even though they are reachable from the internet.
- Business applications and website plugins.
At home: automate
- Leave automatic updates on and restart regularly: many patches are only applied on restart.
- Uninstall software you no longer use: software that is not there does not need updating.
- Check the end-of-support date of your devices: an old phone or a version of Windows that is no longer maintained remains vulnerable.
In small businesses and SMEs: organise
- Keep an up-to-date inventory of computers and installed software: you cannot patch what you do not know about.
- Deploy in waves: a few test computers first, then the rest of the fleet a few days later, to spot any problematic patch.
- Set maintenance windows and deadlines: for example, critical patches within a few days, other patches within the month.
- Track failures: a computer that has not restarted for weeks or whose update keeps failing should raise an alert.
- Keep a record: the list of patches applied is useful evidence for an insurer or an audit.
Only download updates from the source
A pop-up inviting you to “update your player” on an unknown site is a classic trap. Legitimate updates come through the system, the app store or the vendor's official website.
Official sources
- ANSSI (new tab) — Agence nationale de la sécurité des systèmes d'information — guides et publications
- Cybermalveillance.gouv.fr (new tab) — Assistance et prévention en sécurité numérique (fiches réflexes, prestataires ExpertCyber)
The resources cited are published by their authors in their original language. Kayzen is not affiliated with any of these organisations.
This guide is general and for information only. It does not replace legal advice or the help of an IT security professional.