The discipline that prevents most compromises.
WHAT NEEDS PATCHING
The operating system and its packages The web server, PHP and the database Your control panel
Your applications: WordPress, plugins, themes, frameworks and libraries
All of them. A patched operating system with a vulnerable application is still compromised.
A ROUTINE
- Weekly: apply security updates, check for application updates
- Monthly: full system update with a snapshot taken first, reboot if a kernel update is pending
- Quarterly: review what is installed and remove what you no longer use
AUTOMATING IT
Enable automatic security updates for the operating system. Configure application auto-updates where you trust them.
Automation does not remove the need to check. An update that fails silently leaves you unpatched while believing otherwise.
TRACKING VULNERABILITIES
Subscribe to security announcements for your distribution and for the major software you run. A critical vulnerability warrants immediate action rather than waiting for the weekly routine.
WHAT GETS PEOPLE COMPROMISED
Deferring a reboot for months after a kernel update. The patch is installed and not in effect.
