‹ Infrastructure, operations and security

A focused newsletter on critical vulnerabilities and patches, for people who patch systems for a living

Daily

Every morning: a vulnerability under active exploitation and what to check today, a vendor's own patch and advisory, one worth watching before it turns urgent, and any patch that broke something worth knowing about first. For someone who patches systems for a living, not a general security news round-up.

Not theoretical vulnerabilities with no working exploit and no patch, not vendor marketing dressed as a security bulletin, not opinion pieces on the state of security, not vulnerability disclosures under embargo, reported before the patch exists.

Where the news comes from: CISA cybersecurity advisories, Microsoft Security Response Center, BleepingComputer, SecurityWeek, The Record.

Nobody gets this one yet. It starts when you do.