Cyber Explorer Skills · lesson 4 of 16 · 15 min
Updates keep us safer
We learned earlier that updates patch security holes. Now let us go deeper: updates are one of the most powerful and easiest cybersecurity tools available to everyone — and they are free. When a company discovers a vulnerability — a weakness in their software — they race to release an update that fixes it before attackers can use it. Installing the update closes the door.
The window between when a vulnerability is discovered and when an update is released is called a zero-day window. During this time, attackers who know about the vulnerability can try to exploit it. Once the update is released and installed, the window closes.
What gets updated: Your operating system (Windows, macOS, iOS, Android), your apps, your browser, and your antivirus software all need regular updates. Each one matters — a vulnerability in any of them can be exploited.
The update timeline — how it works
- 1
- Vulnerability discovered
A security researcher or attacker finds a weakness in software.
- 2
- Reported responsibly
A responsible researcher reports it to the company privately so they can fix it before attackers use it.
- 3
- Fix is built
The company’s engineers build a patch — a small fix for the specific vulnerability.
- 4
- Update released
The company releases the update to all users.
- 5
- You install it
You install the update — the vulnerability is closed on your device.
- 6
- You are protected
Attackers who knew about the vulnerability can no longer use it against you.
Key words to remember
- Vulnerability
- Patch
- Zero-day
- Responsible disclosure
- Exploit
Match each update concept to its description
Updates — quiz
What is a vulnerability in software?
- A new feature added by the developer
- A weakness that attackers could use to get in
- A type of software update
- A password reset option
Answer: A weakness that attackers could use to get in
A vulnerability is a security weakness in software that attackers can exploit.
What happens when you install a security update?
- Your device gets slower
- The vulnerability is closed on your device
- Your passwords are reset
- Your files are deleted
Answer: The vulnerability is closed on your device
Security updates patch the vulnerability, making it much harder for attackers to exploit.
Only your operating system needs security updates — not your apps or browser.
- True
- False
Answer: False
Apps and browsers also have vulnerabilities that need patching through updates.
What is a patch?
- A type of sticker for your device
- A small fix for a specific security vulnerability
- A new version of an app
- A type of antivirus software
Answer: A small fix for a specific security vulnerability
A patch is a targeted fix for a specific weakness in software.
What is a zero-day vulnerability?
- A vulnerability that was fixed immediately
- A vulnerability that is known but not yet patched
- A vulnerability that only affects old devices
- A vulnerability that cannot be fixed
Answer: A vulnerability that is known but not yet patched
A zero-day is a known vulnerability with no patch yet — attackers can exploit it during this window.
Installing updates as soon as they are available is one of the best ways to stay protected.
- True
- False
Answer: True
Installing updates promptly closes vulnerabilities before attackers can exploit them.
What is responsible disclosure?
- Telling everyone about a vulnerability publicly
- Reporting a vulnerability privately to the company so it can be fixed
- Ignoring a vulnerability you find
- Selling information about a vulnerability
Answer: Reporting a vulnerability privately to the company so it can be fixed
Responsible disclosure means reporting vulnerabilities privately so they can be patched before attackers use them.
Why are software updates free?
- They are not free — you pay for them
- Companies provide them free because fixing vulnerabilities protects everyone
- They are only free for students
- They are free because they are small files
Answer: Companies provide them free because fixing vulnerabilities protects everyone
Updates are free because it is in everyone’s interest — including the company’s — to keep software secure.
An attacker can exploit a vulnerability even after a patch is released, as long as you have not installed the update.
- True
- False
Answer: True
The patch only protects you after you install it. Unpatched devices remain vulnerable.
What is the best way to make sure all your software stays updated?
- Check for updates once a year
- Turn on automatic updates
- Only update when your device slows down
- Never update — updates can cause problems
Answer: Turn on automatic updates
Automatic updates ensure your device installs patches as soon as they are available.
Previous lesson: Keeping devices clean
Back to Cyber Explorer Skills
Next lesson: Sharing family devices