Security Patch — Glossary

The longer version

Vendors release patches as standalone fixes, as part of a larger update or as a replacement version. A patch closes the specific flaw named in its advisory. It does not undo damage that has already happened, and it does not remove anything an attacker has installed in the meantime.

Patching late is a common cause of breaches, since the flaw is public and attackers can compare the old and new versions to see what changed. A fix that sits uninstalled protects nobody.

The 2017 Equifax breach followed this pattern. A fix for the Apache Struts flaw CVE-2017-5638 had been available since March of that year, and the breach was found in July after attackers used the same flaw on an unpatched system. Similarly, Microsoft had released the MS17-010 fix in March 2017, two months before WannaCry spread through unpatched machines.

Know what you run, install fixes by risk and not by habit, restart where the product needs it, and confirm afterwards that the fixed version is the one running.

Where we use “Security Patch”

CybersecurityCISA Adds Exploited GitLab and Cisco Flaws
Two exploited flaws hit CISA's KEV catalog on 29 October, but upgrading GitLab to the 12 October builds still leaves a second CVSS 10.0 flaw open. Here's what to patch, and in what order.
Nov 1, 2026Key term
CybersecurityGlobalProtect CVE-2026-0257 and Ransomware
Palo Alto's GlobalProtect flaw CVE-2026-0257 went from an advisory on 13 May to ransomware intrusions by June. This timeline separates what the documents show from what sources only report or claim.
Nov 1, 2026Key term
CybersecurityMicrosoft's Record Patch Tuesday: What More Than 1,400 CVEs Actually Mean
Microsoft's October 2026 Patch Tuesday listed about 1,413 CVEs, roughly eight times the previous monthly record. Here is what the count measures, who found the flaws, and how to turn the list into a patch order.
Nov 1, 2026Key term
CybersecurityPatch by Exploitation, Not CVSS
Sorting a patch queue by CVSS puts actively exploited flaws behind thousands that nobody is using. Four yes-or-no questions adapted from CISA's new directive give a small team a faster order.
Nov 1, 2026Key term
CybersecurityCitrix and Ivanti Edge Zero-Days: What to Patch Now
Citrix NetScaler and Ivanti Connect Secure were exploited before fixes existed, and NetScaler's 4 October fix builds are still affected by a later SAML flaw on appliances acting as an identity provider. Here are the builds to move to by 6 November and how to check for compromise.
Nov 1, 2026

The longer version

Where we use “Security Patch”

Get the Core in your inbox.