One of the Github projects I started this year was a KEV and End‑of‑Life tracking tool, a small engine that pulled CISA KEV entries and vendor EOL timelines, and highlighted assets that were both vulnerable and unsupported. It was a powerful idea. KEV tells you what’s being exploited. EOL tells you what can’t be patched. […]
KEV + End‑of‑Life Tracking Tool Read More »
Over the past few months, I’ve been experimenting with building small automation tools to support my Patch Management Series. One of those experiments was a patch ingestion and normalisation tool, a lightweight script designed to pull vendor advisories, clean the data, and present it in a consistent format for analysis. It worked surprisingly well. It
Patch Management Automation Tool Read More »
Every month, the major platforms we rely on release security updates that quietly close the gaps attackers love to exploit. Most people never read the advisories. Most organisations don’t have time to track five different ecosystems. That’s why this series exists. Threat‑intel from early 2026 shows attackers are exploiting critical vulnerabilities twice as often and
Introducing the Patch Management Series Read More »
