About Patch Sonar

Patch Sonar explains, in plain English, which software flaws attackers are actively using right now and exactly what to update. It's for small businesses and the IT providers who look after them.

Who we are

Patch Sonar is published by Patch Sonar LLC, a Colorado company. You can reach us at hello@patchsonar.com.

Where our information comes from

• CISA's Known Exploited Vulnerabilities catalog, the U.S. government's list of flaws with reliable evidence of real attacks. We check it every few hours.
• Vendors' own security advisories from Microsoft, Google, Apple, Fortinet, Palo Alto Networks, Cisco, VMware, Ivanti and Citrix, checked every hour. We list a flaw early only when the vendor itself says it's being exploited, and we quote its words.
• The CVE program's official records for when each flaw went public, and EPSS by FIRST.org for attack likelihood.

Every entry links to its source. We don't list rumours, unconfirmed social media reports or proof-of-concept code, and we never publish attack code.

How we decide what to say

• A flaw appears only once CISA or the vendor confirms it's exploited.
• The Zero-day badge goes only on flaws exploited before or as the fix came out (the exact rule).
• "Patch today" is reserved for widespread attacks or internet-facing equipment.
• We tell readers to confirm version numbers with the vendor before updating.

Independence

Some newsletter issues and pages may carry sponsored messages, always labelled. Sponsors and affiliate partners never decide what we write about a vulnerability or a vendor, including their own products.

Corrections

If something is wrong, email hello@patchsonar.com. We correct factual errors within one business day and, for anything that changes what readers should do, note the correction on the page.

Patch Sonar is general information, not professional advice. See our terms of use and privacy policy.