Hey everyone! Our security team just suggested we enable auto-updates for all applications that allow it. Besides the few apps that require admin permissions and can't be auto-updated, I'm curious about the overall implications of having about 600 applications set to update automatically. I wonder if this could lead to issues like unverified new features or increased bandwidth usage. We're working with SCCM and package everything, including specific configurations like disabling cloud storage for apps and auto-updates. What are your thoughts on this?
1 Answer
The trend nowadays leans towards quickly patching vulnerabilities instead of following the old method of validating everything before a patch. If you miss a crucial update and face something like a zero-day exploit, it could lead to severe consequences, which is way worse than a minor disruption in workflow due to a broken update. Speed often trumps caution these days!
That makes sense, but it also depends on how often updates break things. With so many apps, I wonder if the downtime from bad updates might actually outweigh the risks of late patches.