A fix the maker sends for software you already have, usually to close a security hole that attackers are already using.
Like a recall repair on your car: the maker found a flaw, and the fix only helps once you actually bring the car in.
A five-person accounting firm had βinstall updates laterβ clicked on every PC for months. A flaw in a PDF reader, patched in March, was used in June to install a credential stealer when a client sent an invoice.
Patch Management keeps Windows, Office and Chrome current on every covered computer and reports what was patched and when.
Example scenario: A small non-profit had six PCs with Chrome two years out of date because nobody was logged in long enough for it to update. A malicious ad on a legitimate news site used a known Chrome flaw to install malware on two of them. After patching went in, the same flaw was closed on every machine within a day.
Why can't I just let Windows update itself?
Windows Update handles Windows. It skips Chrome, Adobe, Zoom and the rest, and it will wait forever if someone keeps clicking later. Managed patching covers all of it and proves it happened.
Every WILDCARD card exists to solve one named problem. Find yours.