[et_pb_section fb_built=”1″ _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_row _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n
Microsoft have been releasing patches for 30 years. It\u2019s easy to become blas\u00e9 about them.<\/strong><\/p>\n Any system is only as good as how well it is monitored<\/strong>.<\/p>\n After all, there is no such thing as \u201cset and forget\u201d. It is a myth (like self-cleaning ovens). Left to their own devices, there is a failure rate for everything. Even more, once they have failed, they stay failed. They don’t magically fix themselves. That means that if one device is not up to date today, it’s still broken tomorrow.\u00a0 Even worse, it quickly becomes two when another fails, and so on.<\/p>\n That\u2019s why we recommend our KARE<\/a> system. KARE has become more and more sophisticated over the years, with more services.\u00a0 But it\u2019s the basic foundational protections that are still so incredibly important. Patching is one of those, because it has to be done well, and consistently well. It is monitored assiduously, and if we notice a device misses its updates, then we intervene. We have various alerts, prompts and reports to make sure we keep all the software on KARE<\/a> devices updated.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”4_4″ _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”]<\/p>\n In just one example, in August 2022, Microsoft patched a dangerous bug which had been discovered by the NSA in the United States. Since then, the wider community has shared \u2018proof of concept\u2019 (POC) process for exploiting that bug. That\u2019s intended to help developers keep their software secure, but we expect that hackers will also jump on the POC work and quickly turn that into active exploits.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row column_structure=”1_2,1_2″ _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_column type=”1_2″ _builder_version=”4.17.4″ _module_preset=”default” global_colors_info=”{}” theme_builder_area=”post_content”][et_pb_text _builder_version=”4.27.4″ _module_preset=”default” hover_enabled=”0″ global_colors_info=”{}” theme_builder_area=”post_content” sticky_enabled=”0″]<\/p>\n That’s PCs, Macs, and even mobiles.\u00a0 \u00a0They all need to be patched at the very least.\u00a0 But if you assume you are patched, and don’t monitor and check it.\u00a0 If so, you are vulnerable. If one device missed the updates, then it is vulnerable.\u00a0 The same applies to your end-point protection (remember – old fashioned antivirus isnt enough these days either)<\/em><\/p>\n That is the undeniable foundational value of KARE<\/a>. It isn\u2019t exciting, but it is important. Every day, our KARE<\/a> team is working to maintain patching for our clients, to intervene when a system misses an update and to fix any issues.<\/p>\n In these days of enhanced cyber-risk, that matters. You can have all the layers of security in the world, but they are sitting on top of something that is missing a basic level of protection, then you have an elevated risk..<\/p>\nYes, Microsoft can<\/span> automatically apply updates to Windows and Office.<\/h2>\n
But that does not mean that you can rely on it.<\/h2>\n
When the rubber hits the road<\/h2>\n
The bottom line: Every device that accesses your organisation’s data needs to be protected.<\/h2>\n