About the importance of Windows security updates
Windows security updates are a critical part of system protection as they fix known vulnerabilities and improve both security and overall stability of the operating system. Microsoft regularly releases updates for Windows, including security updates, feature updates, and other fixes.
Patch Tuesday
Clock starts ticking from Tuesday
Because at the moment Microsoft releases security updates to the world, criminals (and of course also legitimate security researchers) begin reversing, that is, reverse-engineering the updates to gain an understanding of what vulnerabilities have been fixed.
Soon vulnerabilities and their technical details are known to criminals, and exploits are being written for them, i.e. attack code that can exploit vulnerabilities.
Then the exploit is used, and all Windows systems that have not installed updates at this stage are at risk.
How Updates Work
The Windows update process is designed to be as seamless as possible for the user. The operating system automatically checks for new updates from Microsoft's servers, downloads them, and notifies the user when they are ready to be installed. In some cases, the system may require a restart to complete the updates.
Review of Updates
You can see the current status in Windows Update settings.
Automation of Updates
Windows allows users to automate the update process, ensuring that the system stays up to date without manual intervention. You can do this with a group policy.
Open Group Policy Management console and modify the domain GPO policy.
Open Computer Configuration -> Policies - Administrative Templates -> Windows Components -> Windows Update
From the Windows Update section, select the option "Configure Automatic Updates". Click on it on the right and select "Edit".
Change the settings so that updates are installed automatically (4 - Auto download and schedule the install). Choose a suitable time and day for installing the updates.
In order for the settings to take effect immediately, run gpupdate /force in the PowerShell terminal.
Tasks
Enable automatic updates
When automatic updates are enabled, run Check.ps1 and enter flag 4.
Ticket 4
Ready to become an ethical hacker?
Start today.
As a member of Hakatemia you get unlimited access to Hakatemia modules, exercises and tools, and you get access to the Hakatemia Discord channel where you can ask for help from both instructors and other Hakatemia members.