patch-management
Safeguard articles tagged "patch-management" — guides, analysis, and best practices for software supply chain and application security.
64 articles
How to Update Node.js Safely: A Security-First Guide
The safest way to update Node.js is to move to a supported LTS line and treat the upgrade as a security event, not a chore. Here is a practical path from an EOL version to a maintained one.
How To Handle a Zero-Day Vulnerability: A Response Playbook
A zero-day has no patch on day one, so your first move is containment and exposure reduction, not waiting on a vendor fix. Here is how to handle a zero-day vulnerability under pressure.
CVE-2025-53521 in F5 BIG-IP APM: Patch Posture & SBOM Response
F5 BIG-IP APM bug reclassified from DoS to RCE at CVSS 9.8 and landed on CISA KEV. Defender playbook for the late-cycle severity surprise.
CVE-2025-1094 in PostgreSQL psql: Patch Posture & SBOM Response
PostgreSQL psql SQL injection scored CVSS 8.1 and patched in 17.3 / 16.7 / 15.11 / 14.16 / 13.19. Defender SBOM and rollout playbook.
nginx/1.18.0 (ubuntu): What the Server Banner Reveals and How to Reduce Risk
Seeing nginx/1.18.0 (ubuntu) in a Server header tells you the version, the packaging, and roughly the age of a deployment. Here is what that string implies for security and what to check before assuming you are exposed.
How to Fix Vulnerabilities: A Practical Workflow
A practical, repeatable workflow for how to fix vulnerabilities once a scanner finds them — triage, verify, patch, and confirm — instead of treating every finding as equally urgent.
A Framework for Security Patch Prioritization
You cannot patch everything immediately. Here is a risk-based framework for deciding which patches to apply first when your vulnerability backlog exceeds your capacity.
Nginx 1.20.1 Vulnerabilities: What to Patch
Nginx 1.20.1 fixed a real, exploitable DNS resolver bug — if you're still running an older 1.20.x or 1.19.x build, here's what the fix addressed and why it matters.
How to set up a vulnerability management program
A step-by-step guide to setting up a vulnerability management program: scanning schedules, risk-based triage, patch management, and metrics that hold up in an audit.
What Is Patch Management?
Patch management is the process of finding, testing, and deploying software updates that fix bugs and security flaws. Learn the lifecycle, prioritization, and why it matters.
CVE-2025-15467 in OpenSSL CMS: Patch Posture & SBOM Response
OpenSSL CMS pre-auth stack buffer overflow scored CVSS 9.8. Mail servers, web servers, and anything that processes S/MIME need the fix. Defender playbook below.
What is Vulnerability Remediation
Vulnerability remediation means fixing a flaw at its source, not just detecting it. Learn the workflow, real MTTR benchmarks, and prioritization.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.