This is the riskiest part. Avoid fake "firmware download" sites that bundle malware. Legitimate sources include:

Firmware Explained: The Key to Device Security & Performance