Automatic Updates
An automatic update mechanism introduced by Microsoft starting with Windows Me. It enables proactive push distribution of patches and security updates, replacing the previous approach that required users to manually visit a website to obtain updates. The mechanism has continued in subsequent Windows versions.
Timeline (last 90 days)
Key risk points in the desktop application auto-update chain include: update package signatures not matching local certificates, leftover temporary files after interrupted downloads causing verification failures, and files being locked during the installation phase so they cannot be replaced.
Proxy and antivirus interception in enterprise environments is a common source of failures in desktop application auto-updates.
For components that hold tokens and network access, silent automatic updates should be turned off, because "surprise changes" are a vulnerability, not a feature.
Automatic updates entered the Windows world starting with Windows Me; previously, users had to manually visit the Windows Update website using IE to fetch updates.
All Facts (4)
Key risk points in the desktop application auto-update chain include: update package signatures not matching local certificates, leftover temporary files after interrupted downloads causing verification failures, and files being locked during the installation phase so they cannot be replaced.
50%UnverifiedProxy and antivirus interception in enterprise environments is a common source of failures in desktop application auto-updates.
50%UnverifiedFor components that hold tokens and network access, silent automatic updates should be turned off, because "surprise changes" are a vulnerability, not a feature.
50%UnverifiedAutomatic updates entered the Windows world starting with Windows Me; previously, users had to manually visit the Windows Update website using IE to fetch updates.
50%