Patch Management

Update now! Microsoft confirms three Windows zero-day vulnerabilities
Davey Winder reveals the zero-day vulnerabilities that put your business at risk, and that you need to take action on right now.

CVSS 4.0 vulnerability rating standard fails to provide patch peace-of-mind
The new CVSS 4.0 vulnerability rating is finally here, but Davey Winder isn't convinced it will help businesses tackle the prioritisation problem.

Clop ransomware MOVEit attacks exposed email addresses of 632,000 Pentagon & DoJ employees
The Pentagon is the latest known victim of the MoveIT attack by the Clop ransomware group, explains Davey Winder. And it exposes the importance of applying patches quickly.

Happy 20th birthday Patch Tuesday, but why do we still have Exploit Wednesday?
Back on 14 October 2003, Microsoft published the first set of bundled vulnerability fixes on a set date every month: Patch Tuesday. So why are organisations still so slow to patch?

WannaCry ransomware: lessons to learn in 2023
The WannaCry attack may have taken place six years ago, but many organisations haven't learned the lessons. Davey Winder issues a timely reminder.

What are zero-day exploits?
Zero-day exploits are the bane of both IT managers and end users. So how can you best protect yourself and your business?