Shifting the updater to use https rather than latest plaintext http would be excellent and easy starting point. It's good reward if What's more, it checks new exe's signature, but in initially place, it mustn't allow anybody on the best way to intercept requests so quickly. Fo