Patch Management
Patch management is the process of identifying, testing, and applying software updates that fix known vulnerabilities. The goal is to reduce the time window in which an attacker can exploit a known weakness.
Term
description · examples · notesPatch management is the process of identifying, testing, and applying software updates that fix known vulnerabilities. The goal is to reduce the time window in which an attacker can exploit a known weakness.
Description
The process encompasses tracking vendor-released patches, risk and priority assessment, testing in a controlled environment, and planned deployment to production systems.
Regular patching is one of the most effective measures for reducing the attack surface, but it requires a disciplined process because unpatched systems remain vulnerable to known exploits.
What people often say
- Annual patching is sufficient.
- Patches can be applied without testing because they come from the vendor.
Covers / does not cover
Covers
- Elimination of known vulnerabilities in operating systems and applications
- Reduction of the attack surface available to adversaries
- Systematic tracking of patching status across the entire infrastructure
Does not cover
- Zero-day vulnerabilities for which no patch yet exists
- System misconfigurations not related to software bugs
- Protection against social engineering and phishing
Mentioned in the news
- 15. JUL 2026. Microsoft u julu zakrpio rekordnih 570 propusta — dve 0-day ranjivosti već u aktivnim napadima →
- 22. APR 2026. Oracle u aprilskom CPU paketu zakrpio oko 450 ranjivosti →
- 15. APR 2026. Microsoft zakrpio SharePoint zero-day i još 168 ranjivosti u aprilskom Patch Tuesday ciklusu →
- 15. APR 2026. Microsoft objavio Windows 10 KB5082200 ESU zakrpu sa ispravkama za april i dve zero-day ranjivosti →
- 11. MAR 2026. Microsoft Patch Tuesday mart 2026: zakrpe za desetine ranjivosti u Windowsu i Officeu →
- 13. FEB 2026. Više od 60 softverskih proizvođača objavilo bezbednosne zakrpe u jednom talasu →
- 29. AVG 2026. Pet kritičnih propusta u WordPress dodacima: za samo dva, pola miliona ranjivih sajtova →
- 28. JUL 2026. Microsoftov AI sam testira mrežu i krpi propuste →
- 20. JUL 2026. Ne morate da krpite celu mrežu odjednom: počnite od onog što vas napada →
- 19. JUL 2026. Osvane vam tuđa zastava na sajtu, a vi ni krivi ni dužni: ozbiljna pukotina u jezgru WordPressa →
- 17. JUL 2026. Ukoliko imate 7-Zip stariji od 26.02 — ažurirajte ga →
- 11. JUL 2026. AI pregledači odali kredencijale korisnika jer im je rečeno da je to deo igre →
- 5. MAJ 2026. SonicWall poziva korisnike da hitno zakrpe firewall ranjivosti →
- 19. APR 2026. Cisco zakrpio četiri kritična propusta u ISE i Webex servisima →
- 16. APR 2026. Adobe hitno zakrpio zero-day propust u Acrobatu i Readeru →
- 15. APR 2026. Kritični propusti u Synology SSL VPN Client-u izlažu osetljive podatke →
- 28. MAR 2026. TP-Link objavio zakrpe za kritičan auth bypass propust u Archer NX ruterima →
- 15. MAR 2026. Microsoft objavio vanredni Windows 11 hotpatch za RRAS ranjivost koja omogućava remote code execution →
Threats
reduces 15Threats it reduces. Select one to open its page.
Techniques
neutralizes 8Techniques it neutralizes. Select one to open its page.