--- title: Defenders need more time to patch with the influx of... description: Organizations take up to 43 days to patch vulnerabilities, creating a window defenders need to close. Cisco offers two compensating controls to buy time:... canonical: https://daily.dev/posts/defenders-need-more-time-to-patch-with-the-influx-of-patching-hitting-operations-msdae8xye twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Defenders need more time to patch with the influx of patching hitting operations | daily.dev og:description: Organizations take up to 43 days to patch vulnerabilities, creating a window defenders need to close. Cisco offers two compensating controls to buy time:... og:url: https://daily.dev/posts/defenders-need-more-time-to-patch-with-the-influx-of-patching-hitting-operations-msdae8xye og:image: https://api.daily.dev/og/posts/MSDAe8xyE.png og:image:alt: Defenders need more time to patch with the influx of patching hitting operations og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Defenders need more time to patch with the influx of patching hitting operations **[Cisco](https://daily.dev/sources/cisco)** · 4 min read · 0 upvotes · 0 comments ## Summary Organizations take up to 43 days to patch vulnerabilities, creating a window defenders need to close. Cisco offers two compensating controls to buy time: virtual patching and Live Protect shielding. Virtual patching uses Talos-written Snort rules on Secure Firewall to block exploit traffic at the network layer without touching the vulnerable host, and can be scoped using Secure Workload's CVE mapping. Live Protect is a temporary eBPF-based runtime shield, starting on Nexus 9000 NX-OS, deployed via Nexus Dashboard or SD-WAN Manager, requiring no image upgrade or reboot. Microsoft released 1,411 patches on Oct 13, 70 critical and 3 zero-days. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### What is Cisco Live Protect and how does it differ from virtual patching? Cisco Live Protect is a temporary runtime shield deployed directly on Cisco infrastructure, starting with NX-OS on Nexus 9000 switches, using a small eBPF (Tetragon) policy to intercept a specific syscall, process, or file access after a vulnerability is disclosed. Unlike virtual patching, which blocks exploit traffic at the network layer via Secure Firewall without touching the host, Live Protect runs on the device itself and requires no image upgrade or reboot. _daily.dev surfaces practical options for teams racing to close exposure windows before patches land._ ### How long does it typically take organizations to patch vulnerabilities? It takes organizations up to 43 days to patch vulnerabilities on average, a gap that compensating controls like virtual patching and runtime shielding aim to cover. This delay is cited as the core problem driving demand for risk-mitigating options that reduce exposure while the permanent fix goes through change control. _Teams weighing patch cadence against risk can track mitigation strategies like this on daily.dev._ ### How many vulnerabilities did Microsoft patch in its October patch release? Microsoft released 1,411 patches on October 13, including 70 critical flaws and 3 zero-days. The release broke down into 317 remote code execution flaws, 677 privilege escalation flaws, and 40 security feature flaws, illustrating the scale of vulnerability disclosure that defenders must now triage. _Security teams tracking patch Tuesday volume and triage priorities can follow coverage like this on daily.dev._ ## Similar posts on daily.dev - [When Attacks Come Faster Than Patches: Why 2026 Will be the Year of Machine-Speed Security](https://daily.dev/posts/when-attacks-come-faster-than-patches-why-2026-will-be-the-year-of-machine-speed-security-ox6dyhwob) · The Hacker News · 0 upvotes · 0 comments - [Microsoft’s 3-day patching directive comes with added operational risk](https://daily.dev/posts/microsoft-s-3-day-patching-directive-comes-with-added-operational-risk-hbmjvytiq) · CSO Online · 0 upvotes · 0 comments - [Security patches need patches now that attackers have AI](https://daily.dev/posts/security-patches-need-patches-now-that-attackers-have-ai-jxjf652el) · The Register · 2 upvotes · 0 comments - [The Patch Window Just Closed. Here’s What Comes Next.](https://daily.dev/posts/the-patch-window-just-closed-here-s-what-comes-next--xtqozmwnw) · Cisco · 0 upvotes · 0 comments - [What Zero-Day Response Should Be in the Post-Mythos Era](https://daily.dev/posts/what-zero-day-response-should-be-in-the-post-mythos-era-sy5pwxui7) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#linux](https://daily.dev/tags/linux), [#cisco](https://daily.dev/tags/cisco) [View this post on daily.dev](https://daily.dev/posts/defenders-need-more-time-to-patch-with-the-influx-of-patching-hitting-operations-msdae8xye) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Defenders need more time to patch with the influx of patching hitting operations","url":"https://daily.dev/posts/defenders-need-more-time-to-patch-with-the-influx-of-patching-hitting-operations-msdae8xye","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/defenders-need-more-time-to-patch-with-the-influx-of-patching-hitting-operations-msdae8xye"},"datePublished":"2026-10-28T15:04:03.119Z","dateModified":"2026-10-28T15:19:29.959Z","description":"Organizations take up to 43 days to patch vulnerabilities, creating a window defenders need to close. Cisco offers two compensating controls to buy time:...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d6e040bd976f4cdb26b9ed5f3a3c5a16?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/d6e040bd976f4cdb26b9ed5f3a3c5a16?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Cisco","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Cisco","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/68b8a8be17184235a5067d7c84162f77","url":"https://daily.dev/sources/cisco"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/defenders-need-more-time-to-patch-with-the-influx-of-patching-hitting-operations-msdae8xye","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,linux,cisco","timeRequired":"PT4M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Cisco","item":"https://daily.dev/sources/cisco"},{"@type":"ListItem","position":3,"name":"Defenders need more time to patch with the influx of patching hitting operations"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/defenders-need-more-time-to-patch-with-the-influx-of-patching-hitting-operations-msdae8xye#faq","mainEntity":[{"@type":"Question","name":"What is Cisco Live Protect and how does it differ from virtual patching?","acceptedAnswer":{"@type":"Answer","text":"Cisco Live Protect is a temporary runtime shield deployed directly on Cisco infrastructure, starting with NX-OS on Nexus 9000 switches, using a small eBPF (Tetragon) policy to intercept a specific syscall, process, or file access after a vulnerability is disclosed. Unlike virtual patching, which blocks exploit traffic at the network layer via Secure Firewall without touching the host, Live Protect runs on the device itself and requires no image upgrade or reboot. daily.dev surfaces practical options for teams racing to close exposure windows before patches land."}},{"@type":"Question","name":"How long does it typically take organizations to patch vulnerabilities?","acceptedAnswer":{"@type":"Answer","text":"It takes organizations up to 43 days to patch vulnerabilities on average, a gap that compensating controls like virtual patching and runtime shielding aim to cover. This delay is cited as the core problem driving demand for risk-mitigating options that reduce exposure while the permanent fix goes through change control. Teams weighing patch cadence against risk can track mitigation strategies like this on daily.dev."}},{"@type":"Question","name":"How many vulnerabilities did Microsoft patch in its October patch release?","acceptedAnswer":{"@type":"Answer","text":"Microsoft released 1,411 patches on October 13, including 70 critical flaws and 3 zero-days. The release broke down into 317 remote code execution flaws, 677 privilege escalation flaws, and 40 security feature flaws, illustrating the scale of vulnerability disclosure that defenders must now triage. Security teams tracking patch Tuesday volume and triage priorities can follow coverage like this on daily.dev."}}]} ```