PUP (noun) [Word Notes]

5 min

•Apr 28, 2026about 1 month ago

Summary

This Word Notes episode defines PUP (Potentially Unwanted Programs), explaining how these software programs are installed unintentionally by users, often bundled with legitimate applications. The episode clarifies that while PUPs aren't inherently malicious like malware, they perform unwanted tasks such as displaying adware or collecting user data, and discusses how modern operating systems now block them by default.

Insights

PUPs operate in a gray zone between user consent and malware—users technically agree to them through unchecked installation boxes, but without explicit knowledge of what they're installing
PUPs are distinguished from malware by the presence of user consent (however implicit), but can perform identical harmful actions like data collection and adware deployment
Modern operating systems are implementing proactive defense mechanisms, with Windows 10 and 11 now blocking low-reputation applications associated with PUPs by default
The bundling of PUPs into legitimate software installation processes exploits user behavior—most users click 'next' without reading terms, making this a UX/security design issue
PUPs represent a significant security concern for organizations, with mobile app security incidents affecting 72% of organizations surveyed

Trends

Increased focus on mobile application security as 92% of organizations report rising threat levels in past two yearsOperating system vendors implementing default blocking of low-reputation applications to protect users from PUPsGrowing distinction between PUPs and malware in security discourse, requiring different detection and prevention strategiesSoftware bundling practices under increased scrutiny as security best practiceUser education gap around installation processes and consent mechanisms driving PUP proliferation

Topics

Potentially Unwanted Programs (PUPs)Mobile Application Security Software Installation Security Adware and Browser Extensions Data Collection Software Windows 10 and Windows 11 Security Features Malware vs. PUP Distinction User Consent and Privacy Policies Application Reputation Systems Cybersecurity Incident Response

Companies

GuardSquare

Mobile app security provider offering industry-leading security for Android and iOS applications

Microsoft

Blocks low-reputation applications associated with PUPs by default in Windows 10 and Windows 11

Malwarebytes

Security firm cited for explaining the distinction between PUPs and malware in their definitions

People

Sidney Butler

Provided expert commentary on potentially unwanted programs and their impact on computer systems

Tim Nodar

Wrote the Word Notes episode on PUPs

Rick Howard

Edited and hosted the Word Notes episode

Quotes

"Despite its cute name, having a pup on your computer isn't fun. Potentially unwanted programs also known as PUAs or potentially unwanted apps, tread a fine line between being an annoyance and straight-up malware."

Sidney Butler

"In general, a pup is any piece of software that gets installed on your computer without your knowledge, that does something you don't know about even if you did install knowingly, and generally makes changes or takes an action you wouldn't want."

Sidney Butler

"Pups are distinguished from malware because the user technically consents to downloading them in the same sense that someone can agree to a privacy policy without actually reading it."

Malwarebytes

"Typically, the installation process for the other software will use an opt-in approach, where the option to install the PUP is already ticked on the installation wizard. Sneaky, sneaky."

Sidney Butler

Full Transcript

You're listening to the Cyber Wire Network, powered by N2K. When it comes to mobile application security, good enough is a risk. A recent survey shows that 72% of organizations reported at least one mobile application security incident last year, and 92% of responders reported threat levels have increased in the past two years. GuardSquare delivers the highest level of security for your mobile apps without compromising performance, time to market, or user experience. Discover how GuardSquare provides industry-leading security for your Android and iOS apps at www.guardsquare.com. The word is PUP. Spelled P for potentially, U for unwanted, and P for programs. Definition A software program installed unintentionally by a user that typically performs tasks not asked for by the installer Example sentence. When Kevin installed that cool new game, he didn't know that he was also installing a pump. Origin and context. Pups aren't inherently malicious, but may have unwanted or undesirable effects, which could include adware, browser extensions and toolbars, and software that collects information. Pups are frequently bundled into the installation process of a legitimate software program that the user intended to download. Malwarebytes explains that pups are distinguished from malware because the user technically consents to downloading them in the same sense that someone can agree to a privacy policy without actually reading it. However, pups can perform some of the same actions as malware. YouTuber BrightTech notes that Microsoft now blocks low-reputation applications associated with pups by default in Windows 10 and Windows 11 Nerd reference Sidney Butler is a writer and YouTube broadcaster for the online Tech Tips magazine. He had this to say about potentially unwanted programs. Despite its cute name, having a pup on your computer isn't fun. Potentially unwanted programs, also known as PUAs or potentially unwanted apps, Tread a fine line between being an annoyance and straight-up malware. But anything installed on your computer without your express knowledge is a problem. In general, a pup is any piece of software that gets installed on your computer without your knowledge, that does something you don't know about even if you did install knowingly, and generally makes changes or takes an action you wouldn't want. This makes pups different from malicious software such as Trojans, Viruses, or Ransomware. Typically, the installation process for the other software will use an opt-in approach, where the option to install the PUP is already ticked on the installation wizard. Sneaky, sneaky. This relies on users simply clicking next, next, next, until the installation completes instead of reading the fine print. Next thing you know, there's a brand new PUP on your system, making your life miserable in some annoying way. Word Notes is written by Tim nodar executive produced by peter kilping and edited by john petrick and me rick howard the mix sound design and original music have all been crafted by the ridiculously talented elliot peltzman thanks for listening Thank you. give you an edge on your professional career? Earn a Master of Science in Law at University of Maryland Cary School of Law. This part-time two-year online graduate degree program is designed for experienced professionals to understand laws and policies that impact your industry. Learn from CHHS faculty who are experts in their field. No GRE required. Learn how you can master the law without a JD at law.umaryland.edu.