Why should you install software updates and security patches quickly?
Options
- They fix known flaws that attackers actively use (Correct option)
- They make the display brighter and the text sharper
- They only add decorative features to the software
- Updates are optional and can be skipped safely
Answer
They fix known vulnerabilities that attackers actively try to use
Why
When a vulnerability is published (with a CVE number), everyone, including attackers, learns about it. Attackers scan for systems that have not updated yet.
A patch is the update that fixes the problem.
This is also why teams scan their dependencies automatically (Dependabot, SCA tools): old libraries are a common way in.
Remember
Patch fast: known holes are exploited fast.