Transforming the updater to implement https in place of recent plaintext http could be good and straightforward initial step. It really is nice reward if Furthermore, it checks new exe's signature, but in initial put, it shouldn't allow everyone on the way in which to intercept requests