Why update software?
Software and app updates often include security fixes that close weaknesses criminals already know how to use, as well as other improvements. The NCSC tells people to apply updates when they appear, and to turn on automatic updates where they can. Ignoring a prompt leaves known holes unfixed. Security update management is also one of the five Cyber Essentials controls. 123
By Secordit. Last checked: 10 November 2026.
Go to the steps · All glossary terms
How it works
- A vendor issues an update. That update may include a security fix as well as other changes. 12
- You apply the update, or you let automatic updates do that. An update can take time, so it is often best on home Wi-Fi with the device plugged in. 1
- When a manufacturer stops supporting a device, those fixes stop. The NCSC says you should then replace it with a model that still receives updates, not necessarily the newest model. 12
How it can look
The NCSC's top tips say to install the latest software and app updates when they appear. Security update management is also one of the five Cyber Essentials technical controls. 13
Warning signs
- Update prompts are repeatedly ignored, or automatic updates are switched off without another way to apply fixes. 1
- A device is still in daily use after the manufacturer has stopped supporting it. 12
- A message tells you to install an update from a link in an unexpected email or text, rather than through the device's own update settings. 12
What to do now
- Apply updates when they appear, and turn on automatic updates where you can. 1
- When you can, run an update on home Wi-Fi with the device plugged in, because it can take time. 1
- If a manufacturer has stopped supporting a device, plan to replace it with a model that still receives updates. It does not have to be the newest model. 12
UK reporting and support
- If you think a device is infected, follow the NCSC help for infected devices. 4
- For fraud or hacking in England, Wales or Northern Ireland, use Report Fraud (opens in a new tab). In Scotland, call Police Scotland on 101. 578
- If money has gone or banking details were shared, call your bank using the number on your card. Or use 159 if your bank participates. 6
- If someone is in danger, call 999. 78
How to protect yourself
Frequently asked questions
Is it safe to turn on automatic updates on my phone?
The NCSC tells people to turn on automatic updates where they can. An update can take time, and is often best on home Wi-Fi with the device plugged in. 1
My phone is old and no longer gets updates. Do I have to buy the newest model?
The NCSC says you should replace an unsupported device with a model that still receives updates. That does not have to be the newest model. 12
Are software updates only about new features?
No. They often include security fixes that close weaknesses criminals already know how to use, as well as other improvements. 1
Matching kit
First Hour After a Breach · £29 · Digital download.
An incident-response planning kit for UK small businesses. It is not a live incident-response or legal service.
General information, not legal, financial or personalised security advice. Secordit is not a police or bank reporting service.
News Pulse
Account security, explained by email.
Sources
- NCSC, Install the latest software and app updates | National Cyber Security Centre (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- NCSC, Protecting your devices | National Cyber Security Centre (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- NCSC, Cyber Essentials overview | National Cyber Security Centre (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- NCSC, Help for individuals | National Cyber Security Centre (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Report Fraud, Report Fraud (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Stop Scams UK, 159 Phone number - Stop Scams UK (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Police Scotland, How to report a crime - Police Scotland (opens in a new tab). Accessed 10 November 2026 (Europe/London).
- Report Fraud, Reporting cyber crime and fraud or phishing attempts - Report Fraud (opens in a new tab). Accessed 10 November 2026 (Europe/London).

