US-CERT lists the 10 most-exploited security bugs and, yeah, it's mostly Microsoft holes people forgot to patch

Vulnerabilities in Microsoft Windows, Office, and Windows Server, for which patches have been available for years, continue to be the favorite target for hackers looking to spread malware. A list posted by US-CERT this week rattles off the 10 most oft-targeted security vulnerabilities during the past three years, and finds …

[Anonymous Coward]

Of copurse if you patch and upgrade

you'll just get a load of new undisclosed TLA Telemetry on steriods.

[Anonymous Coward]

Re: Of copurse if you patch and upgrade

Yup, that actually was the final trigger to not install anything Microsoft at all on my new laptop. I noticed on the old one that MS Update now did not switch off when you told it you wanted manual updates, rather it then reverted to hassling you weekly.

Well, f*ck that, thankfully I am in the position not to need their stuff.

[Mike 137]

"it's mostly Microsoft holes people forgot to patch"

AKA "it's mostly Microsoft holes that slipped through the test cycle into release"

[Anonymous Coward]

No excuse

Keeping a known, patched, vulnerability live for years is unforgivable.

If you want to switch operating systems, fine, and it can certainly be justified. Otherwise install patches reasonably consistently.

Ignorance may be no excuse but purposely ignoring knowledge is far worse.

[a_yank_lurker]

Good Practices

It is good practice to keep your system updated. This is OS and application independent. The issue is how fast do you need to update, immediately or wait a couple of weeks to see what happens. Both options have good arguments for them. But in either case keep the system updated.

[onebignerd]

Not on the list but, WannaCry is still out there causing problems.