What an update actually does
Software is written by people, and large programs contain mistakes. Some mistakes only cause annoying bugs. Others are security vulnerabilities: flaws that an attacker may be able to use to gain access to a device, steal data or install harmful software. When developers find or are told about such a flaw, they write a fix, often called a patch, and release it in an update.
An update can therefore include any of the following, and release notes will usually say which:
- Security fixes for known vulnerabilities.
- Bug fixes, which solve crashes and odd behavior.
- Performance changes.
- New features or changes to the design.
- Compatibility improvements for newer hardware or file formats.
Not every update is about security, but the ones that are matter a great deal.
Why delay is a risk
When a fix is released, the flaw it addresses often becomes public knowledge, at least in outline. Attackers can study the update to learn what was wrong and then look for people who have not installed it yet. Many successful attacks use vulnerabilities for which a fix already existed, simply because the target had not applied it. The gap between a fix being released and you installing it is a window of exposure.
Vulnerabilities which are used before a fix exists do occur, but they are less common than known, patched ones. Installing updates promptly is among the most effective low-effort measures for ordinary users, and security agencies consistently list it among their basic recommendations.
What needs updating
It is easy to think only of the operating system, but several layers matter.
- The operating system on phones, tablets and computers.
- Web browsers, because they handle untrusted content all day. Most update themselves quietly.
- Apps and programs, including document readers, video call software and learning apps.
- Browser extensions and plug-ins. Remove ones you no longer use.
- Home routers and other connected devices, which have their own firmware, and are often forgotten. Check the manufacturer’s instructions or your internet provider’s advice.
- Security software, if you use it.
Support does end
Software and devices are supported for a limited time. After the maker stops providing updates, any newly found flaws stay unfixed. Using an operating system or phone that is no longer supported becomes riskier as time passes, especially for tasks like banking or email. If a device you rely on has reached the end of support, consider limiting what you do on it, or plan an upgrade or replacement. The manufacturer’s website states how long a product is supported. For learners on tight budgets, who may be affected by the digital divide, this is a real difficulty; keeping to the latest version available and avoiding sensitive tasks on an old device can reduce, though not eliminate, the risk.
Making updates manageable
Updates annoy people because they interrupt work and sometimes take a long time. A few habits can reduce the friction.
Turn on automatic updates where available. For most people this is the most dependable option. Automatic installation means you are not relying on remembering.
Choose a convenient time. Many systems let you set active hours or schedule restarts overnight. Plug a laptop or phone in at night so that updates can finish.
Restart when asked. Some updates only take effect after a restart. Postponing it indefinitely leaves you only partly protected. Save your work, then restart at the next natural break.
Do not leave it before a deadline. Avoid starting a large update on the evening before an exam or submission. Do it earlier in the week, when an unexpected delay would do less harm.
Back up first. Updates rarely cause data loss, but a recent backup means a failed update is an inconvenience, not a disaster. A basic backup strategy of several copies in different places covers this and many other risks.
Check free space. Updates need storage room. A full phone or laptop is a common reason they fail.
Use a reliable connection. Large updates may use a lot of mobile data. Wait for a stable connection and check your allowance.
Be careful of fake update prompts
Scammers copy update notices. A pop-up on a website telling you your browser or media player is out of date, with a button to download, is a classic route for harmful software. Install updates through your device’s settings, the official app store or the program’s own update function, not through a link in a web page or email. This is another case where the habit of spotting phishing emails and similar tricks pays off.
When an update causes a problem
Occasionally an update changes a feature, slows an older device or conflicts with other software. Often the problem can be solved by restarting, checking for a further update, or searching the vendor’s support pages. In a school or workplace, report the issue to IT support. Cautious users sometimes wait a few days for a major new version of an operating system, to let early problems be found, but this applies to large feature upgrades, not to ordinary security patches, which should not be delayed.
Updates are one layer
Even a fully updated device can be compromised by a stolen password or a convincing scam. Updates work best together with long unique passwords, a second login step and careful behavior. For advice on supported devices and settings in your situation, consult your device maker’s help pages and your country’s official cyber security guidance.