More than 1,400 vulnerabilities in one Microsoft Patch Tuesday, another 174 from Adobe, and then PHP2Shell sends organizations scrambling to secure a runtime used across much of the web, with governments taking public services offline while their teams work through the exposure.

Patch immediately is the right advice, but by all means tell the team to patch faster, then fund the work, establish who owns it and make sure the business can contain an incident while remediation proceeds, otherwise it is just management passing the problem down the hall.

Read the full piece on what "fixed" actually means in production: buff.ly/a3vZJRG

#Cybersecurity #PatchManagement #PHP2Shell #InfoSec #AppSec