RSS: get nagged automatically
Every new CISA KEV entry, delivered to wherever you already read things. It's like a newsletter that doesn't want your email, doesn't track opens, and never sends a "just circling back!" follow-up.
Wait, what's RSS?
A 25-year-old technology that quietly kept working while social media ate itself. Your reader checks a URL now and then, and when something new shows up, you see it. No algorithm deciding you'd rather see a sourdough video. No account. No "engagement."
If you're under 30: it's push notifications, except you're in charge.
What's in it
- The 50 newest entries in CISA's Known Exploited Vulnerabilities catalog
- CVE, vendor, product, what's broken, the due date, and a ransomware flag when CISA has one
- Links to NVD and CISA for each entry, so you can check our homework
- Refreshed hourly. New KEV entries usually land a few times a week. Some weeks it's a lot. Those are bad weeks.
Where to put it
- Slack
- In a channel, run
/feed subscribe https://patchyourshit.today/feed.xml(needs Slack's RSS app). Pro move: put it in the channel where the people who own the firewalls hang out. Make it everyone's problem. - Microsoft Teams
- Use a Workflow (Power Automate) with the RSS trigger "When a feed item is published" and post to a channel.
- Feed readers
- Feedly, Inoreader, NetNewsWire, Thunderbird, Outlook, or whatever you've been hoarding since Google Reader died (RIP). Add the URL above.
- Your own automation
- It's plain RSS 2.0.
curlit, parse it, open a ticket, page someone, make a Raspberry Pi flash red. We don't judge.
What it isn't
Not official guidance. Not a substitute for reading the vendor advisory. Not going to patch anything for you. (We checked. Several times.)