Daily
A focused newsletter on critical vulnerabilities and patches, for people who patch systems for a living
What an issue holds
Every morning: a vulnerability under active exploitation and what to check today, a vendor's own patch and advisory, one worth watching before it turns urgent, and any patch that broke something worth knowing about first. For someone who patches systems for a living, not a general security news round-up.
What it leaves out
Not theoretical vulnerabilities with no working exploit and no patch, not vendor marketing dressed as a security bulletin, not opinion pieces on the state of security, not vulnerability disclosures under embargo, reported before the patch exists.
Where the news comes from
CISA cybersecurity advisories, Microsoft Security Response Center, BleepingComputer, SecurityWeek, The Record.
Nobody gets this one yet. It starts when you do.
Start this one