Updates: patch day, not someday

Most successful attacks reuse fixed vulnerabilities: the patch existed for months, the victim just never installed it. Turn on automatic updates for the OS, the browser and the router, and actually reboot when asked — a pending reboot is a pending patch.

Update in this order: router firmware (your perimeter), OS, browser, then everything else. And keep backups current before major upgrades, because the only thing worse than an unpatched system is a failed upgrade with no way back.

The browser is the front line

You live in the browser, so patch it first and keep it lean: updates on, extensions counted on one hand from vendors you can name. Remove the coupon finder and the three PDF converters — every extension reads every page you open, which makes a shady one worse than most malware.

Do not forget the small computers

Router, NAS, cameras and the smart TV run ancient software with default passwords and never ask to update. Change every default password on install day, check for firmware twice a year, and retire gear the vendor abandoned — an unpatched camera on your LAN undoes a patched PC.