If your operating system is not patched to the latest update, you are at risk of being attacked. This is why it is crucial that your devices are always up to date.
Manufacturers will regularly release updates to add new features, but also to fix any vulnerabilities. Applying these updates is the best thing you can do to improve security. If it is an option we will set systems and apps to update automatically. However, when hardware and software reaches its end of life (like Windows 7) you need to look at replacing it, as important security updates will no longer be rolled out.
The Cyber Essentials Certification requires that all devices, software and applications are up to date.