Patch, and then patch some more

Vendors release patches  because vulnerabilities have been discovered that  can lead your system susceptible to compromise.

• Windows: Make sure you have enabled automatic updates. Also go into the settings and make sure you have it set to update other programs as well. Then go into the advanced settings and disable 'Delivery Optimization'. While it seems like a great idea, it uses similar ports as common malware that spread laterally. Disable it at all costs
• https://support.microsoft.com/en-us/help/4468254/windows-update-delivery-optimization-faq
• Also keep all of your other programs up to date. MS Office and Adobe Reader are gateways used by malicious actors to infiltrate your system.
• Keep all other devices up to date as well. This includes but is not limited to your router, WiFi access point, and any other devices you may have on your network. i.e. Video cameras, baby monitors, smart speakers, etc.