Windows 7: Vulnerabilities.

What Your Users Don't Know About Vulnerabilities Can Hurt You.

Security strategies that rely on end user knowledge and action can be risky, experts say.


If your security strategy relies on end users to perform updates or avoid risky behavior, then it's time to ask yourself a question: How much do end users really know about security vulnerabilities?


"Non-IT folks are often only aware of security vulnerabilities that are covered in mainstream publications and media or hit close to home by impacting a family member," says Mike Greide, senior security researcher at Zscaler. "As a result, while end users may ensure that they regularly run Windows Update or update their antivirus definitions, they do not seem to be updating or patching their client applications as consistently."
Keeping users informed about current threats is a job in itself, experts say -- and even if you succeed, many end users will still have gaps in their systems. Nonmainstream applications, old and outdated applications, unauthorized, user-downloaded applications -- such programs are often found on end user devices, but seldom secured or updated.