[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:patch-management":3},{"control":4,"products":24,"stories":72,"lessons":116,"related":141,"compare":142},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":23},"patch-management","Automated patch management","Known holes get closed in days, not months.","Automated deployment of operating system and application updates to laptops and servers, with deadlines, reporting and the ability to push emergency patches quickly.","Most exploited vulnerabilities already have a patch. The gap between a patch being released and installed is the attacker's window, and it is usually measured in weeks. Automation closes it for most devices and frees people for the systems that cannot be patched automatically.",[11,12,13,14],"Does it patch third-party applications, not just the operating system?","Can we push an emergency patch to all devices within 48 hours, and prove it?","How does it handle devices that are off the network?","What reporting do we get on devices that fail to update?","Risk: exploitation of vulnerabilities that already have a patch. Control: automated patching with a 14-day standard deadline and a 48-hour emergency deadline. Owner: IT operations lead. Measure: share of devices fully patched within deadline.",[17,18,19,20],"NIS2 Art. 21(2)(e): security in maintenance","DORA Art. 9: policies for patches and updates","CIS Control 7: continuous vulnerability management","ISO\u002FIEC 27001:2022 A.8.8: management of technical vulnerabilities",{"name":22,"slug":5},"Patch Management","2026-10-16T12:48:09.08808+00:00",[25,33,41,49,57,65],{"vendor_slug":26,"vendor_name":27,"vendor_logo":28,"product_slug":29,"product_name":30,"url":31,"description":32},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":34,"vendor_name":35,"vendor_logo":36,"product_slug":37,"product_name":38,"url":39,"description":40},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":42,"vendor_name":43,"vendor_logo":44,"product_slug":45,"product_name":46,"url":47,"description":48},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":5,"product_name":69,"url":70,"description":71},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"total":73,"last_days":74,"recent":75},3131,1450,[76,81,86,91,96,101,106,111],{"slug":77,"title":78,"published_at":79,"brief":80},"researchers-continue-to-find-serious-vulnerabilities-in-internet-connected-refri-04d35e","Researchers continue to find serious vulnerabilities in internet connected refrigerators","2026-11-13T21:20:51+00:00","14 vulnerabilities in Dixell refrigeration units grant root access, with some under active exploitation.",{"slug":82,"title":83,"published_at":84,"brief":85},"this-year-s-bug-count-just-passed-100k-9b8800","This year’s bug count just passed 100K","2026-11-13T20:52:17+00:00","The number of disclosed software vulnerabilities in 2026 has surpassed 100,000, more than double last year's total.",{"slug":87,"title":88,"published_at":89,"brief":90},"german-military-drone-operations-disrupted-by-cyberattack-6ce23a","German military drone operations disrupted by cyberattack","2026-11-13T17:31:56+00:00","German drone maker Quantum Systems hit by cyberattack targeting update server.",{"slug":92,"title":93,"published_at":94,"brief":95},"postgresql-patches-52-flaws-including-22-year-old-bug-enabling-authenticated-rce-d8cc21","PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE","2026-11-13T16:53:08+00:00","PostgreSQL patches 52 flaws, including a 22-year-old bug enabling authenticated RCE.",{"slug":97,"title":98,"published_at":99,"brief":100},"check-point-gateways-hacked-via-php2shell-to-deploy-vmware-esxi-wiper-97c01e","Check Point gateways hacked via PHP2Shell to deploy VMware ESXi wiper","2026-11-13T16:21:43+00:00","Check Point gateways exploited via PHP2Shell to deploy ESXi wiper in targeted attacks",{"slug":102,"title":103,"published_at":104,"brief":105},"november-patch-tuesday-how-to-sort-through-the-patches-dacc34","November Patch Tuesday: How to Sort Through the Patches","2026-11-13T15:23:43+00:00","Microsoft's November Patch Tuesday addresses 1,252 CVEs, highlighting the need for strategic patching over a blanket",{"slug":107,"title":108,"published_at":109,"brief":110},"citrix-patches-28-security-vulnerabilities-in-netscaler-including-a-critical-fla-fabc8a","Citrix Patches 28 Security Vulnerabilities in NetScaler, Including a Critical Flaw in Default Installations","2026-11-13T14:18:29+00:00","Citrix patches 28 NetScaler flaws including critical memory overflow affecting all default installations",{"slug":112,"title":113,"published_at":114,"brief":115},"hackers-use-fake-purchase-order-emails-to-deliver-xloader-malware-through-malici-fb620b","Hackers Use Fake Purchase Order Emails to Deliver XLoader Malware Through Malicious Word Documents","2026-11-13T14:09:51+00:00","Hackers distribute XLoader malware via fake purchase order Word documents exploiting CVE-2017-11882.",[117,121,125,129,133,137],{"slug":118,"title":119,"published_at":120},"internet-connected-refrigeration-units-expose-critical-infrastructure-to-root-level-attacks","Internet-Connected Refrigeration Units Expose Critical Infrastructure to Root-Level Attacks","2026-11-13T22:21:16.893+00:00",{"slug":122,"title":123,"published_at":124},"actively-exploited-vulnerabilities-added-to-cisa-kev-catalog-demand-immediate-remediation","Actively Exploited Vulnerabilities Added to CISA KEV Catalog Demand Immediate Remediation","2026-11-13T21:21:21.381+00:00",{"slug":126,"title":127,"published_at":128},"cve-volume-hits-100k-ai-driven-discovery-outpaces-human-patching-capacity","CVE Volume Hits 100K: AI-Driven Discovery Outpaces Human Patching Capacity","2026-11-13T21:20:43.015+00:00",{"slug":130,"title":131,"published_at":132},"compromised-update-server-grounds-german-military-drones","Compromised Update Server Grounds German Military Drones","2026-11-13T18:20:23.075+00:00",{"slug":134,"title":135,"published_at":136},"unpatched-check-point-gateways-leveraged-to-wipe-vmware-esxi-infrastructure","Unpatched Check Point Gateways Leveraged to Wipe VMware ESXi Infrastructure","2026-11-13T17:20:43.507+00:00",{"slug":138,"title":139,"published_at":140},"1252-cves-in-one-month-why-blind-patching-is-as-dangerous-as-not-patching","1,252 CVEs in One Month: Why Blind Patching Is as Dangerous as Not Patching","2026-11-13T16:20:44.156+00:00",[],{"ninjaone\u002Fninjaone-patch-management":143,"qualys\u002Fpatch-management":160,"microsoft\u002Fintune":176,"ivanti\u002Fneurons-patch-management":194,"manageengine\u002Fpatch-manager-plus":207,"action1\u002Faction1-patch-management":221},{"hq_country":144,"also_provides":145,"reviews":149,"affected":159,"reported":159},"US",[146],{"slug":147,"name":148},"endpoint-management","Device management (MDM and UEM)",[150,153,156],{"label":151,"url":152},"TechRadar: I tested NinjaOne, and found it offers a great mix of power and simplicity for IT teams (2024)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fninjaone-review",{"label":154,"url":155},"PeerSpot: NinjaOne user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fninjaone-reviews",{"label":157,"url":158},"Gartner Peer Insights: NinjaOne user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fninjaone-476582708",0,{"hq_country":144,"also_provides":161,"reviews":162,"affected":159,"reported":175},[],[163,166,169,172],{"label":164,"url":165},"MITRE ATT&CK Evaluations Enterprise 2024 (ER6): Qualys endpoint results","https:\u002F\u002Fevals.mitre.org\u002Fresults\u002Fenterprise\u002F?vendor=qualys&scenario=2&evaluation=er6&view=individualParticipant",{"label":167,"url":168},"Gartner Peer Insights: Qualys VMDR user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fqualys-vmdr",{"label":170,"url":171},"PeerSpot: Qualys Exposure Management user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fqualys-exposure-management-reviews",{"label":173,"url":174},"PeerSpot: Qualys TruRisk Eliminate user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fqualys-trurisk-eliminate-reviews",13,{"hq_country":144,"also_provides":177,"reviews":179,"affected":192,"reported":193},[178],{"slug":147,"name":148},[180,183,186,189],{"label":181,"url":182},"AV-TEST: business results for Microsoft Defender","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fmicrosoft\u002F",{"label":184,"url":185},"ITPro: Microsoft Defender for Business review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fcloud\u002Fcloud-security\u002Fmicrosoft-defender-for-business-review-feature-filled-enterprise-security-for-small-businesses",{"label":187,"url":188},"PeerSpot: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmicrosoft-defender-for-endpoint-reviews",{"label":190,"url":191},"Gartner Peer Insights: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fmicrosoft-defender-for-endpoint",311,128,{"hq_country":144,"also_provides":195,"reviews":196,"affected":206,"reported":159},[],[197,200,203],{"label":198,"url":199},"TechRadar: Ivanti Neurons review (2024)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fivanti-neurons-review",{"label":201,"url":202},"PeerSpot: Ivanti Autonomous Endpoint Management user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fivanti-autonomous-endpoint-management-reviews",{"label":204,"url":205},"Gartner Peer Insights: Ivanti Autonomous Endpoint Management user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fivanti-autonomous-endpoint-management",29,{"hq_country":208,"also_provides":209,"reviews":210,"affected":159,"reported":220},"IN",[],[211,214,217],{"label":212,"url":213},"TechRadar: ManageEngine Endpoint Central review (2023)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fmanageengine-endpoint-central-review",{"label":215,"url":216},"Gartner Peer Insights: ManageEngine Patch Manager Plus user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fmanageengine-patch-manager-plus",{"label":218,"url":219},"PeerSpot: ManageEngine Patch Manager Plus user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmanageengine-patch-manager-plus-reviews",2,{"hq_country":144,"also_provides":222,"reviews":223,"affected":159,"reported":159},[],[224,227],{"label":225,"url":226},"Help Net Security: Review: Action1, simple and powerful patch management (2024)","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2024\u002F07\u002F30\u002Freview-action1-simple-powerful-patch-management\u002F",{"label":228,"url":229},"Gartner Peer Insights: Action1 user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Faction1"]