I know that this is a vague question, but a colleague just claimed “You can see… by the various updates that Microsoft, Apple, and other vendors regularly release. Most of these are security fixes.” Are “most” of the updates [in my case, MS releases for win10/1809] really “security fixes”? I know that some close some vulnerability or another but is it really “most”? I get confused about all the stuff about updates among all the different MS systems that get different batches of updates, but I thought that relatively *few* were truly critical security fixes. Am I mistaken?
I don’t think I can select specific updates — all I see in updates is, generally, a single big “cumulative update” and there’s nothing I see that lets me see what’s bundled into the update and pick and choose which pieces to accept. If some of those are really closing vulnerabilities I wonder if there’s a way to have a “split” defcon.. something like “defcon 2 but you oughta install this, this and this specific update
