FixableRunning a website or small org
Unpatched software & zero-days
Known holes left unfixed - the attacker’s preferred shortcut.
Understand it
Most breaches use flaws for which a fix already exists; the victim had simply not applied it. A “zero-day” is the rarer case where no fix is out yet - but prompt patching removes the great majority of the risk.
How to spot it
Update reminders ignored, end-of-life equipment still in use, software no longer receiving security fixes.
Close the gap
- Turn on automatic updates for devices, apps and servers.
- Replace equipment that no longer receives security fixes.
- Keep a list of what you run, so nothing is overlooked.
- Apply critical patches in days, not months.
What to do about it
This is part of your plan - Switch on updates and lock your devices. Work through it there and you’ll close this off along with everything else it covers.