A recent study from the Internet Storm Center found that an unpatched computer, when connected to the Internet, will be compromised by malware within 20 minutes. I assume that means without a firewall up and running, because otherwise we’d all be unpatched at some point or another.
Here’s a real-life story of what can happen to you if you don’t follow this very basic (but extremely important) advice.