Intel with the latest round of CPU faults has now abandoned Ivy Bridge and older platforms.
KB4284835 fixes some of the problems in Windows to address the faults.
Some updates replace earlier ones to address performance issues.
Chrome, IE and Edge are all updated, other less common browsers are more likely to be insecure. In Windows the frequency of updates has been accelerated to help keep Windows 10 secure.
The laptop machines we have are older but still fully functional. The cost to replace them is more than we can afford easily.. Our Lenovo X220 has the CPU soldered into place, so even if intel made a replacement CPU, it cannot be installed.
We are aware that Intel has a large number of lawsuits over the recent problems. Intel is likely to be spending a pile of cash to fix the mess.