Aequus IT Blog

For some reason, the question "Why patch" seems to be popping up lately.  This isn’t anything new, Patch Tuesday has been around a while.  Yet, this isn’t just some button you push like a slot machine, this is about controlling your network environment - something that your business relies on (otherwise you’re reading the wrong blog).

Some background basics: A software vulnerability is an error/flaw in a  application, that can be used by a hacker to perform actions, which have a negative security impact on your computer.  These range from releasing of sensitive information stored on your computer (like credit card numbers and account information) to automatic installation of viruses, keyloggers, or other code.

Why should you care? An example: When you browse the Internet, you use an "Internet browser" this may be: Internet Explorer. All browsers have been affected by vulnerabilities that have allowed hackers to do anything on your computer - all you had to do was to visit a website. The website could take control of your computer. The same goes for all other applications on your computer - unless you keep them updated and patched.
Programs such as anti-virus, personal firewall, and anti-spyware are good protection, but they will NOT protect you from the threat of software vulnerabilities.

How can you protect yourself from software vulnerabilities?
Keep your software updated. The only real solution, to avoid becoming a victim of software vulnerabilities, is to install the latest security updates that the software vendors release. In other words, make sure that you always have the latest secure versions.

Software vendors fight software vulnerabilities to protect you
Software vendors work hard to release new versions of their software correcting vulnerabilities. This is good news. Unfortunately, most are not completely forthcoming about security-related releases. No one likes to admit that they made mistakes.  What can you do about it? How do you keep track of the dozens of applications installed in your computer? Which ones have known  vulnerabilities and which don’t?

You don’t patch, just because a yellow shield says "hey, patch this", unless of course your network admin or IT firm has pre-approved them.