Every app, website, and device runs on code written by people, and people make mistakes. When a mistake in that code can be abused to do something the maker never intended, security researchers call it a vulnerability.
What a vulnerability actually is
A vulnerability is a weakness, not an attack. Think of an unlocked window in a house. The window being unlocked is the vulnerability. Someone climbing through it is the attack. Most vulnerabilities are never used against anyone, but some are, which is why fixing them quickly matters.
How vulnerabilities get found and fixed
- Researchers and the company itself often find flaws first and report them privately so a fix can be prepared.
- The maker releases an update, sometimes called a patch, that closes the gap.
- Public databases list known flaws, usually with a reference number starting with “CVE,” so everyone can talk about the same issue.
Why updates matter
Once a fix is released, the details of the original flaw often become widely understood. Anyone who has not installed the update stays exposed to a problem that is now well known. That is why keeping software current is one of the most effective things an everyday person can do.
What you can do
- Turn on automatic updates for your phone, computer, and web browser.
- Update apps from the official app store, not from links in messages or emails.
- Replace devices that no longer receive security updates, such as very old phones, tablets, and routers.
- Restart your devices when prompted, since some updates only finish after a restart.
- Help older relatives turn on automatic updates, since they are less likely to notice a prompt.
The takeaway
You cannot prevent every flaw in the software you use, but you can shorten the time a known flaw stays open on your devices. Automatic updates make that happen without any extra effort.