1.3Updates & antivirus
The essentials in 30 seconds
- Already-fixed flaws: attacks target unpatched systems — the vulnerability is public and documented.
- Automate everything: OS, browser, apps + restart when asked instead of postponing.
- Antivirus active, obsolete hunted: real-time protection + end of support = replace, never disable the company tool.
Threaded mini-case — Karim checks up his workstation in Algiers
Karim has postponed a restart requested by his workstation for weeks and keeps an old program he never opens. After a reminder from his IT, he installs what is pending via automatic update, updates his browser, checks his antivirus protection is active and uninstalls the useless. He notes the rule: on his work workstation, IT's pace counts, not his.
Sequel to cases 1.1-1.2 — Karim maintains the workstation whose accounts are protected.
1. A fixed flaw stays exploitable…
A flaw fixed by the vendor stays exploitable… until you install it. Attackers target unpatched systems first: the vulnerability is public, the attack is documented.
Karim understands each postponed week is a week with the door open: he installs what is pending instead of clicking “later”.
2. Automate everything
Good practices: enable automatic updates for the OS and apps, keep antivirus active and up to date, and do not postpone restarts forever. On mobile: same, and only install from official stores.
Karim enables automatic everywhere and restarts when asked: manual discipline never lasts, the automatic setting does.
3. Hunt the obsolete
An end-of-support system (old system, abandoned apps) becomes indefensible: replace it. On a work workstation, IT often manages all this: never disable a company security tool.
Karim uninstalls the abandoned program and reports his old workstation to IT instead of tinkering: indefensible means replace, period.
🔎 Concrete example — 🔎 Concrete example — 10-minute check-up
An up-to-date, lightened workstation.
OS update: install what is pending + enable automatic.
Browser: About menu → update → restart.
Antivirus: real-time protection active? Uninstall the useless.
→ updates then take over on their ownTakeaway: 10 minutes is enough when automatic is set.
Lesson: “restart later” postponed = weeks of vulnerability.
Section vocabulary
- Security update
- A fix closing a known flaw: each postponement leaves the door open to publicly documented attacks.
Simple example: The update Karim installs instead of postponing one more week.
What it is not: a mere feature addition unrelated to flaws.
Reflex: install fast, especially when the flaw is public.
- Automatic update
- A setting applying fixes without action: recommended everywhere (system, browser, apps).
Simple example: The setting Karim enables to stop relying on his memory.
What it is not: a manual check from time to time, when you think of it.
Reflex: automatic everywhere, restart included.
- Antivirus / EDR
- A tool detecting and blocking known malware and suspicious behaviour; a single one active and up to date.
Simple example: The real-time protection Karim checks on his workstation.
What it is not: two stacked antiviruses getting in each other's way, or none.
Reflex: active, up to date, never disabled on the work workstation.
- End of support
- A system or software no longer receiving fixes: indefensible, to be replaced.
Simple example: The old abandoned program Karim uninstalls and reports to IT.
What it is not: up-to-date software maintained by its vendor.
Reflex: no more fixes = replace, no tinkering.
In practice — In practice — Your 10-minute workstation check-up
- OS update (or equivalent): check status, install what is pending, enable automatic.
- Browser: menu → About → it checks and updates itself; restart it if asked.
- Antivirus: open workstation security (or the company tool) — real-time protection active? last scan?
- Hunt the obsolete: list installed programs, uninstall the ones you no longer use (each abandoned program is a future flaw).
Ready-to-say script — report an obsolete workstation to IT (30 s)
“My workstation has asked for a restart for a long time and I have a program I no longer use, possibly end of support. I disabled nothing: can you check and tell me what to do?”
Say to internal support; never disable or bypass a security tool while waiting.
Copy-paste template — 10-minute check-up
OS: status _______________ | automatic [ ] | restarted [ ]
BROWSER: up to date [ ] | restarted [ ]
ANTIVIRUS: real-time [ ] | last scan _______________
OBSOLETE: uninstalled _______________ | reported to IT _______________Personal workstation
Even with no IT: automatic everywhere, up-to-date browser, built-in protection active — and official stores only on mobile.
Company workstation in Algiers
Karim follows his IT's deployment pace (which tests first): he installs when asked and reports the anomaly instead of forcing.
Slow connection
Schedule updates off-peak but never cancel them: a security fix postponed forever equals a fix never applied.
Old hardware
If the system is end of support: ask IT or management for replacement — no antivirus compensates for missing fixes.
✓ Best practices
- Automatic everywhere.
- Restart when asked.
- Official stores on mobile.
✗ Common pitfalls
- Endless postponements.
- End-of-support system.
- Disabling / stacking antiviruses.
Key takeaways
- Attacks massively exploit ALREADY-fixed flaws: fast updating is a major defence.
- Automate everything: system, browser, apps — manual discipline never lasts.
- “Restart later” postponed 15 times = weeks of vulnerability: restart.
- On a work workstation, IT often manages all this: NEVER disable a company security tool.
48h Challenge - apply tomorrow
Do the 10-minute check-up (template above): install what is pending, enable automatic, check antivirus and uninstall one useless program. 15 minutes is enough.
- I can explain why fixed flaws stay dangerous.
- I can set automatic + restart when asked.
- I did my 10-minute check-up + reported the obsolete.
Frequently asked questions
Can an update break my apps?
Rarely, and pure security fixes are very safe. The risk of an unpatched workstation is beyond compare — in a company, IT tests before deploying: follow its pace, not yours.
Should I buy a paid antivirus?
For an ordinary personal workstation, the free built-in protection is enough today for most uses. In a company, IT equips you — what matters is not stacking two antiviruses nor disabling the one in place.
Why are updates a major defence?