Last month I finally stopped trusting vendor patch timelines, here's why

Our SIEM vendor said a critical rule update would roll out Tuesday. I planned around it, told the night shift to hold off on manual checks. Then Thursday came, still nothing. A buddy at a shop in Austin said same thing happened to them, so I dug into the release notes and found a known delay buried in a forum thread from 3 weeks ago. That changed my mind about ever taking a vendor's word at face value again. Now I check the public bug tracker every Monday before we schedule any changes. Has anyone else gotten burned by vendor release dates and switched to independent verification?

0 comments

0 Comments

No comments yet

Be the first to share your thoughts on this discussion.