[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"framework:nist-sp\u002F800-40":3},{"item":4,"lessons":16,"controls":66,"related":97},{"family":5,"item":6,"code":7,"title":8,"citations":9,"publisher":10,"summary_md":11,"official_text":12,"official_attribution":12,"official_url":13,"link_label":14,"note":12,"updated_at":15},"nist-sp","800-40","SP 800-40","SP 800-40 Rev. 4: Guide to Enterprise Patch Management Planning: Preventive Maintenance for Technology",908,"US National Institute of Standards and Technology (NIST)","**What it covers.** NIST guidance that treats patching as routine preventive maintenance rather than an emergency activity. It helps organisations build an enterprise patch management strategy, covering how to group assets, define maintenance plans and decide how quickly different kinds of updates should be applied.\n\n**In practice.** Applying it well means having an accurate software and firmware inventory, risk-based patch timeframes agreed with asset owners, and planned maintenance windows that include testing and rollback. Organisations also prepare responses for situations where a patch cannot be applied, such as isolation or compensating controls. Managers should expect metrics on patch coverage and time to remediate, plus records of exceptions with owners and review dates.\n\n**Common gaps.** Typical weaknesses are incomplete inventories, no separate fast track for actively exploited vulnerabilities, and long-lived exceptions for legacy or vendor-managed systems that nobody revisits.",null,"https:\u002F\u002Fcsrc.nist.gov\u002Fpubs\u002Fsp\u002F800\u002F40\u002Fr4\u002Ffinal","Read the publication at NIST","2026-10-18T15:18:43.663+00:00",{"total":9,"list":17},[18,22,26,30,34,38,42,46,50,54,58,62],{"slug":19,"title":20,"published_at":21},"critical-drupal-rce-flaws-demand-immediate-patching","Critical Drupal RCE Flaws Demand Immediate Patching","2026-10-17T16:20:34.593+00:00",{"slug":23,"title":24,"published_at":25},"critical-magento-rce-flaw-demands-immediate-patching","Critical Magento RCE Flaw Demands Immediate Patching","2026-10-16T22:20:34.131+00:00",{"slug":27,"title":28,"published_at":29},"beyondtrust-zero-day-highlights-critical-risk-of-unpatched-edge-devices","BeyondTrust Zero-Day Highlights Critical Risk of Unpatched Edge Devices","2026-10-16T22:20:18.59+00:00",{"slug":31,"title":32,"published_at":33},"active-exploitation-of-fortinet-and-beyondtrust-flaws-highlights-patch-urgency","Active Exploitation of Fortinet and BeyondTrust Flaws Highlights Patch Urgency","2026-10-16T20:21:00.599+00:00",{"slug":35,"title":36,"published_at":37},"openbsd-root-exploit-chains-decades-old-bug-to-bypass-kernel-protections","OpenBSD Root Exploit Chains Decades-Old Bug to Bypass Kernel Protections","2026-10-16T20:20:45.22+00:00",{"slug":39,"title":40,"published_at":41},"chinese-apt-exploits-beyondtrust-zero-day-to-harvest-credentials-and-exfiltrate-data","Chinese APT Exploits BeyondTrust Zero-Day to Harvest Credentials and Exfiltrate Data","2026-10-16T12:20:53.961+00:00",{"slug":43,"title":44,"published_at":45},"windows-security-update-breaks-smart-app-control-feature","Windows Security Update Breaks Smart App Control Feature","2026-10-16T10:20:27.498+00:00",{"slug":47,"title":48,"published_at":49},"critical-rce-flaws-in-f5-nginx-and-juniper-junos-os-demand-immediate-patching","Critical RCE Flaws in F5 NGINX and Juniper Junos OS Demand Immediate Patching","2026-10-16T10:20:14.366+00:00",{"slug":51,"title":52,"published_at":53},"peerstitch-malware-exploits-unpatched-fortios-to-evade-detection-via-legitimate-processes","PEERSTITCH Malware Exploits Unpatched FortiOS to Evade Detection via Legitimate Processes","2026-10-16T08:21:33.492+00:00",{"slug":55,"title":56,"published_at":57},"microsoft-patches-24-rce-flaws-in-office-suite","Microsoft Patches 24 RCE Flaws in Office Suite","2026-10-16T08:20:15.913+00:00",{"slug":59,"title":60,"published_at":61},"actively-exploited-atlassian-vulnerability-added-to-cisa-kev-catalog","Actively Exploited Atlassian Vulnerability Added to CISA KEV Catalog","2026-10-15T20:21:37.943+00:00",{"slug":63,"title":64,"published_at":65},"unpatched-routers-hijacked-to-silently-sell-your-bandwidth","Unpatched Routers Hijacked to Silently Sell Your Bandwidth","2026-10-15T20:21:08.002+00:00",[67,72,77,82,87,92],{"slug":68,"name":69,"problem":70,"stories":71},"patch-management","Automated patch management","Known holes get closed in days, not months.",811,{"slug":73,"name":74,"problem":75,"stories":76},"vulnerability-management","Vulnerability scanning and prioritisation","You know which systems are vulnerable, and which ones to fix first.",679,{"slug":78,"name":79,"problem":80,"stories":81},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",297,{"slug":83,"name":84,"problem":85,"stories":86},"threat-intelligence","Threat intelligence","Attack campaigns reach your sector, suppliers or software before your team hears about them.",154,{"slug":88,"name":89,"problem":90,"stories":91},"endpoint-management","Device management (MDM and UEM)","Every company laptop and phone is known, encrypted, locked down and up to date.",58,{"slug":93,"name":94,"problem":95,"stories":96},"privileged-access-management","Privileged access management (PAM)","Admin accounts stop being one stolen password away from control of everything.",48,[98,104,109,114,119,124,129,134],{"family":99,"item":100,"code":101,"title":102,"together":103},"cis","7","Control 7","Continuous Vulnerability Management",903,{"family":105,"item":106,"code":107,"title":108,"together":76},"nist-800-53","si-2","SI-2","Flaw Remediation",{"family":110,"item":111,"code":112,"title":112,"together":113},"itil","overview","ITIL",639,{"family":99,"item":115,"code":116,"title":117,"together":118},"12","Control 12","Network Infrastructure Management",473,{"family":105,"item":120,"code":121,"title":122,"together":123},"ra-5","RA-5","Vulnerability Monitoring and Scanning",422,{"family":99,"item":125,"code":126,"title":127,"together":128},"2","Control 2","Inventory and Control of Software Assets",262,{"family":105,"item":130,"code":131,"title":132,"together":133},"sc-7","SC-7","Boundary Protection",228,{"family":99,"item":135,"code":136,"title":137,"together":138},"13","Control 13","Network Monitoring and Defense",221]