Security Awareness Briefing  //  Eriu Technology  //  Defensive Use Only

PATCH
OR PERISH

The update you keep snoozing.

Why 'remind me tomorrow' leaves a door open at the back of the house — and how to stop the snooze.

01 / What it is

A patch is a fix for a known flaw. 'Unpatched' means a hole the vendor has already told the world about — and told attackers how to find. Most breaches don't use clever unknown tricks; they walk through doors left open after the lock was offered.

02 / How it works
1
A flaw is found in software you run.
2
The vendor releases a patch — and describes the flaw.
3
Attackers scan the internet for anyone who hasn't applied it.
4
The unpatched get breached through a hole with a known fix.

→ The window between 'patch released' and 'you applied it' is exactly the window they're hunting in.

What gets neglected

The forgotten corners bite hardest:

Operating systemsThe 'later' that never comes.
Browsers & pluginsYour most-exposed software.
Routers & firewallsRarely updated, always exposed.
Old kitPast end-of-life, still plugged in.
!
Turn on automatic updates and mean itFor everything that offers it, switch automatic updates on. For the kit that doesn't — routers, firewalls, servers — put a monthly reminder in the calendar and actually do it. And retire anything the maker no longer supports; it will never be patched again.
03 / Why it's dangerous
  • The flaw is public — and so is how to exploit it.
  • Attackers scan at scale for the unpatched, constantly.
  • 'Later' becomes 'never' without a system.
  • End-of-life kit never gets fixed, ever.
04 / How you stop it
  • Turn on automatic updates wherever they're offered.
  • Schedule monthly patching for kit that can't auto-update.
  • Keep an inventory so nothing's forgotten.
  • Prioritise internet-facing systems — patch those first.
  • Replace end-of-life hardware and software on a plan.
Snoozed again · Door still open
An Eriu Technology security briefing  ·  Awareness & defence only