[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"control:patch-management":3},{"control":4,"products":24,"stories":72,"lessons":116,"related":141,"compare":142},{"slug":5,"name":6,"problem":7,"summary":8,"business_value":9,"vendor_questions":10,"risk_register":15,"framework_refs":16,"area":21,"updated_at":23},"patch-management","Automated patch management","Known holes get closed in days, not months.","Automated deployment of operating system and application updates to laptops and servers, with deadlines, reporting and the ability to push emergency patches quickly.","Most exploited vulnerabilities already have a patch. The gap between a patch being released and installed is the attacker's window, and it is usually measured in weeks. Automation closes it for most devices and frees people for the systems that cannot be patched automatically.",[11,12,13,14],"Does it patch third-party applications, not just the operating system?","Can we push an emergency patch to all devices within 48 hours, and prove it?","How does it handle devices that are off the network?","What reporting do we get on devices that fail to update?","Risk: exploitation of vulnerabilities that already have a patch. Control: automated patching with a 14-day standard deadline and a 48-hour emergency deadline. Owner: IT operations lead. Measure: share of devices fully patched within deadline.",[17,18,19,20],"NIS2 Art. 21(2)(e): security in maintenance","DORA Art. 9: policies for patches and updates","CIS Control 7: continuous vulnerability management","ISO\u002FIEC 27001:2022 A.8.8: management of technical vulnerabilities",{"name":22,"slug":5},"Patch Management","2026-10-16T12:48:09.08808+00:00",[25,33,41,49,57,65],{"vendor_slug":26,"vendor_name":27,"vendor_logo":28,"product_slug":29,"product_name":30,"url":31,"description":32},"action1","Action1","\u002Fvendor-logos\u002Faction1.png","action1-patch-management","Action1 Patch Management","https:\u002F\u002Fwww.action1.com\u002F","Cloud-native patch management for Windows, macOS and third-party applications.",{"vendor_slug":34,"vendor_name":35,"vendor_logo":36,"product_slug":37,"product_name":38,"url":39,"description":40},"ivanti","Ivanti","\u002Fvendor-logos\u002Fivanti.png","neurons-patch-management","Ivanti Neurons for Patch Management","https:\u002F\u002Fwww.ivanti.com\u002Fproducts\u002Fivanti-neurons-for-patch-management","Risk-based patch management for operating systems and third-party applications.",{"vendor_slug":42,"vendor_name":43,"vendor_logo":44,"product_slug":45,"product_name":46,"url":47,"description":48},"manageengine","ManageEngine","\u002Fvendor-logos\u002Fmanageengine.png","patch-manager-plus","ManageEngine Patch Manager Plus","https:\u002F\u002Fwww.manageengine.com\u002Fpatch-management\u002F","Patch management for operating systems and third-party applications, on premises or in the cloud.",{"vendor_slug":50,"vendor_name":51,"vendor_logo":52,"product_slug":53,"product_name":54,"url":55,"description":56},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","intune","Microsoft Intune","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fmicrosoft-intune","Device management for Windows, macOS, iOS and Android, including update rings and compliance policies.",{"vendor_slug":58,"vendor_name":59,"vendor_logo":60,"product_slug":61,"product_name":62,"url":63,"description":64},"ninjaone","NinjaOne","\u002Fvendor-logos\u002Fninjaone.png","ninjaone-patch-management","NinjaOne Patch Management","https:\u002F\u002Fwww.ninjaone.com\u002Fpatch-management\u002F","Automated patching of operating systems and third-party applications from the cloud.",{"vendor_slug":66,"vendor_name":67,"vendor_logo":68,"product_slug":5,"product_name":69,"url":70,"description":71},"qualys","Qualys","\u002Fvendor-logos\u002Fqualys.png","Qualys Patch Management","https:\u002F\u002Fwww.qualys.com\u002Fapps\u002Fpatch-management\u002F","Patch deployment for operating systems and third-party applications, linked to vulnerability findings.",{"total":73,"last_days":74,"recent":75},2428,1025,[76,81,86,91,96,101,106,111],{"slug":77,"title":78,"published_at":79,"brief":80},"hackers-exploit-siteguard-waf-flaw-to-run-commands-as-admins-de332a","Hackers exploit SiteGuard WAF flaw to run commands as admins","2026-10-18T14:23:16+00:00","Hackers exploit SiteGuard WAF flaw to run commands as admins.",{"slug":82,"title":83,"published_at":84,"brief":85},"drupal-patches-critical-rce-flaws-warns-exploits-may-emerge-soon-978985","Drupal patches critical RCE flaws, warns exploits may emerge soon","2026-10-17T14:32:48+00:00","Drupal patches two critical RCE vulnerabilities in Field UI and Entity List modules.",{"slug":87,"title":88,"published_at":89,"brief":90},"beyondtrust-remote-support-zero-day-continues-trend-of-exploited-edge-bugs-92a3ec","BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs","2026-10-16T20:34:37+00:00","BeyondTrust Remote Support zero-day vulnerability is being actively exploited.",{"slug":92,"title":93,"published_at":94,"brief":95},"critical-blockstrap-flaw-lets-hackers-run-code-on-magento-servers-eef67d","Critical BlockStrap flaw lets hackers run code on Magento servers","2026-10-16T20:00:59+00:00","Critical BlockStrap flaw in Magento and Adobe Commerce allows arbitrary code execution.",{"slug":97,"title":98,"published_at":99,"brief":100},"researchers-demonstrate-openbsd-root-exploit-chaining-37-year-old-shared-memory--ebaf37","Researchers Demonstrate OpenBSD Root Exploit Chaining 37-Year-Old Shared-Memory Bug","2026-10-16T17:48:45+00:00","OpenBSD root exploit chains 37-year-old bug with kernel flaw, bypassing protections.",{"slug":102,"title":103,"published_at":104,"brief":105},"prolific-chinese-espionage-group-exploits-beyondtrust-zero-day-e8d3d8","Prolific Chinese espionage group exploits BeyondTrust zero-day","2026-10-16T17:09:09+00:00","Chinese espionage group Armory Castle exploits BeyondTrust zero-day.",{"slug":107,"title":108,"published_at":109,"brief":110},"in-other-news-ics-sniper-attack-hacking-xworm-malware-operators-250k-chrome-expl-546439","In Other News: ICS-Sniper Attack, Hacking XWorm Malware Operators, $250k Chrome Exploit","2026-10-16T14:09:51+00:00","News roundup covers ICS-Sniper attack, XWorm RAT RCE, and Chrome exploit.",{"slug":112,"title":113,"published_at":114,"brief":115},"cisa-adds-two-known-exploited-vulnerabilities-to-catalog-ae4608","CISA Adds Two Known Exploited Vulnerabilities to Catalog","2026-10-16T12:00:00+00:00","CISA adds two actively exploited vulnerabilities to its KEV Catalog, urging federal agencies to prioritize patching.",[117,121,125,129,133,137],{"slug":118,"title":119,"published_at":120},"siteguard-waf-os-command-injection-exploited-for-root-access","SiteGuard WAF OS Command Injection Exploited for Root Access","2026-10-18T16:20:26.047+00:00",{"slug":122,"title":123,"published_at":124},"critical-drupal-rce-flaws-demand-immediate-patching","Critical Drupal RCE Flaws Demand Immediate Patching","2026-10-17T16:20:34.593+00:00",{"slug":126,"title":127,"published_at":128},"critical-beyondtrust-auth-bypass-actively-exploited-patch-immediately","Critical BeyondTrust Auth Bypass Actively Exploited — Patch Immediately","2026-10-16T22:21:05.267+00:00",{"slug":130,"title":131,"published_at":132},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","2026-10-16T22:20:18.59+00:00",{"slug":134,"title":135,"published_at":136},"active-exploitation-of-fortinet-and-beyondtrust-flaws-highlights-patch-urgency","Active Exploitation of Fortinet and BeyondTrust Flaws Highlights Patch Urgency","2026-10-16T20:21:00.599+00:00",{"slug":138,"title":139,"published_at":140},"openbsd-root-exploit-chains-decades-old-bug-to-bypass-kernel-protections","OpenBSD Root Exploit Chains Decades-Old Bug to Bypass Kernel Protections","2026-10-16T20:20:45.22+00:00",[],{"ninjaone\u002Fninjaone-patch-management":143,"qualys\u002Fpatch-management":160,"microsoft\u002Fintune":176,"ivanti\u002Fneurons-patch-management":194,"manageengine\u002Fpatch-manager-plus":207,"action1\u002Faction1-patch-management":220},{"hq_country":144,"also_provides":145,"reviews":149,"affected":159,"reported":159},"US",[146],{"slug":147,"name":148},"endpoint-management","Device management (MDM and UEM)",[150,153,156],{"label":151,"url":152},"TechRadar: I tested NinjaOne, and found it offers a great mix of power and simplicity for IT teams (2024)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fninjaone-review",{"label":154,"url":155},"PeerSpot: NinjaOne user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fninjaone-reviews",{"label":157,"url":158},"Gartner Peer Insights: NinjaOne user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fninjaone-476582708",0,{"hq_country":144,"also_provides":161,"reviews":162,"affected":159,"reported":175},[],[163,166,169,172],{"label":164,"url":165},"MITRE ATT&CK Evaluations Enterprise 2024 (ER6): Qualys endpoint results","https:\u002F\u002Fevals.mitre.org\u002Fresults\u002Fenterprise\u002F?vendor=qualys&scenario=2&evaluation=er6&view=individualParticipant",{"label":167,"url":168},"Gartner Peer Insights: Qualys VMDR user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fqualys-vmdr",{"label":170,"url":171},"PeerSpot: Qualys Exposure Management user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fqualys-exposure-management-reviews",{"label":173,"url":174},"PeerSpot: Qualys TruRisk Eliminate user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fqualys-trurisk-eliminate-reviews",14,{"hq_country":144,"also_provides":177,"reviews":179,"affected":192,"reported":193},[178],{"slug":147,"name":148},[180,183,186,189],{"label":181,"url":182},"AV-TEST: business results for Microsoft Defender","https:\u002F\u002Fwww.av-test.org\u002Fen\u002Fantivirus\u002Fbusiness-windows-client\u002Fmanufacturer\u002Fmicrosoft\u002F",{"label":184,"url":185},"ITPro: Microsoft Defender for Business review (2024)","https:\u002F\u002Fwww.itpro.com\u002Fcloud\u002Fcloud-security\u002Fmicrosoft-defender-for-business-review-feature-filled-enterprise-security-for-small-businesses",{"label":187,"url":188},"PeerSpot: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmicrosoft-defender-for-endpoint-reviews",{"label":190,"url":191},"Gartner Peer Insights: Microsoft Defender for Endpoint user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fmicrosoft-defender-for-endpoint",244,105,{"hq_country":144,"also_provides":195,"reviews":196,"affected":206,"reported":159},[],[197,200,203],{"label":198,"url":199},"TechRadar: Ivanti Neurons review (2024)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fivanti-neurons-review",{"label":201,"url":202},"PeerSpot: Ivanti Autonomous Endpoint Management user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fivanti-autonomous-endpoint-management-reviews",{"label":204,"url":205},"Gartner Peer Insights: Ivanti Autonomous Endpoint Management user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fivanti-autonomous-endpoint-management",17,{"hq_country":208,"also_provides":209,"reviews":210,"affected":159,"reported":159},"IN",[],[211,214,217],{"label":212,"url":213},"TechRadar: ManageEngine Endpoint Central review (2023)","https:\u002F\u002Fwww.techradar.com\u002Fpro\u002Fmanageengine-endpoint-central-review",{"label":215,"url":216},"Gartner Peer Insights: ManageEngine Patch Manager Plus user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Fmanageengine-patch-manager-plus",{"label":218,"url":219},"PeerSpot: ManageEngine Patch Manager Plus user reviews","https:\u002F\u002Fwww.peerspot.com\u002Fproducts\u002Fmanageengine-patch-manager-plus-reviews",{"hq_country":144,"also_provides":221,"reviews":222,"affected":159,"reported":159},[],[223,226],{"label":224,"url":225},"Help Net Security: Review: Action1, simple and powerful patch management (2024)","https:\u002F\u002Fwww.helpnetsecurity.com\u002F2024\u002F07\u002F30\u002Freview-action1-simple-powerful-patch-management\u002F",{"label":227,"url":228},"Gartner Peer Insights: Action1 user reviews","https:\u002F\u002Fwww.gartner.com\u002Freviews\u002Fproduct\u002Faction1"]