The process of acquiring, testing, and deploying software updates that fix known vulnerabilities.
Unpatched, known vulnerabilities remain one of the most common ways real breaches happen — patch management is unglamorous but foundational security work.