This can take security vendors hours, days, or weeks. Each time new malware is discovered that is not consistent with previously known threats, a new signature must be created. Software updates and antivirus programs use malware signatures to detect threats.