Explain like I'm five · Security

What is a Patch?

Patching, told as a story about nailing the builder's boards over the cracks in the wall.

the builderCVE-2024-1234CVE-2024-5678for every crack found, a board arrives — monthly, or at once if urgent

The builder sends boards.For every crack found, a board to cover it. Monthly — or at once if it's urgent.

a dusty pile of boardslater… I'm busy right nowthe crack stays

The boards arrive, and nobody nails them on.'Later', 'I'm busy', 'what if it breaks something'. The pile just grows.

the one who nails it onwhich walls have cracksurgent ones firstsmall wall firstcheck it's onreceiving the board isn't the patch — nailing it on is

Patching is nailing the board on in time.Receiving the board isn't the patch; nailing it on is. Urgent ones first, test on a small wall, then check it's really on.

Finding cracksa magnifying glass on every wall
Urgent firstcracks thieves already use
Small wall firsttest it doesn't block the door
Check it's ondon't assume — look
this monthsecond Tuesday: patch daynail them on together, on the set dayURGENT!a crack thieves already usetoday, right nowurgent boards don't wait for the day

Set a patch day, and the pile never grows.Nail them on together on the set day each month. Cracks thieves are already using don't wait for that day.

the old storehousedoesn't fitso a guard stands at that crackthe small wallit blocked the door toowhich is why the small wall goes first

Some walls won't take the board.Old storehouses won't take it. Then a guard stands at that crack and the hallway is split. And a board can block a door too — so the small wall goes first.

In one breath

A patch = the builder's board, nailed on in time. It counts when it's on the wall, not when it arrives.

Most incidents start at a crack that already had a board. Patch day (Patch Tuesday), urgent first (KEV), test on a small wall (staging), then verify.

When grown-ups say it

Patch
The board. The fix the builder (the vendor) sends to cover a crack. → the hole nobody knows about
Patch management
The order and the day for boards. Deciding what goes on which wall, and when.
Vulnerability scan
A magnifying glass on every wall. Builds the list of which cracks our castle has.
Prioritization (CVSS · KEV)
The urgent board. Ordered by how big the crack is (CVSS) and whether thieves already use it (KEV).
Staging
The small wall. Where a board goes first, to see it doesn't block a door.
Patch Tuesday
Patch day. The second Tuesday each month, when builders ship boards together.
Virtual patch
A guard at the crack. When the board won't fit or doesn't exist yet. → the note checker
Legacy
The old storehouse that takes no board. The builder no longer makes boards for it. → the things that can't wear a tag
Next story
The Spare Chest Far Away →
Want another term as a picture book? Request →