Clear Path step · Business · Open for business on Monday
Patch fast, starting with anything facing the internet
Why it matters: Attackers increasingly use AI to find and use new flaws quickly, and internet-facing devices like VPNs and firewalls are a common way in. Patching those first closes the doors they try first.
Do it
- Turn on automatic updates for operating systems, browsers and apps on every device.
- Patch internet-facing equipment and software first: firewall, VPN, remote access tools, website platform and plugins.
- Use CISA's Known Exploited Vulnerabilities catalog to decide what is urgent.
- Replace equipment past its end of support.
- Run endpoint protection on every computer and remove admin rights from everyday accounts.
Check it worked: Laptops and phones update automatically, the firewall, VPN, router and website software are current, nothing runs past its end of support, and every computer has endpoint protection.
If an outside IT company handles your IT, send them this:
Hi, could you please confirm automatic updates are on for every computer, phone, browser and app we use? We'd like internet-facing equipment patched first: firewall, VPN, remote access tools, website platform and plugins, using CISA's Known Exploited Vulnerabilities catalog to set urgency. Please also list anything past end of support, confirm endpoint protection runs everywhere and remove admin rights from everyday accounts. Please confirm when done.
Simply put
It's like fixing the locks on the street-facing doors before the internal ones. Firewalls, VPNs and your website face the whole internet, so attackers try them first; patching them first closes the doors they reach for.
In detail
If you have no on-site servers, consider retiring the VPN entirely and relying on cloud sign-in with MFA and device checks, which is the small-business form of zero trust. Updates are also how post-quantum cryptography will reach your devices.
Points toward the Long View: devices that keep receiving fixes, including the move to quantum-resistant encryption.