Jordan Benzing

Microsoft’s Agent Governance Toolkit is worth checking out. Don’t put your trust the prompt to enforce policy, put controls around the actions: tool calls, identity, approvals, and audit logs. github.com/microsoft/agen…

Prompt Injection attacks are a hell of a thing. Especially when you can get at a tool via a URL submission. us.portal.patchmypc.com/api/vulnerabil…

Just a few chrome vulnerabilities to deal with this month…. #PatchTuesday #CveInsights us.portal.patchmypc.com/api/vulnerabil…

We talked about this on #PatchTuesday webinar today. This past month was a record breaking month for Microsoft, and other vendors in terms of fixes shipped! us.portal.patchmypc.com/api/vulnerabil…

And the hits just keep coming. Midnight Eclipse burns another zero day. This is something like 4 of 5 of them back to back. #PatchTuesday #Security us.portal.patchmypc.com/api/vulnerabil…

I went and did the thing. 26.2 miles. 4:39 minutes chip time. Now I have to decide if I will do the thing again.

Chromium vulnerabilities are tasty. Also make sure you patch chrome… it used to be like 30vulns a patch now it’s more. us.portal.patchmypc.com/api/vulnerabil…

That’s a fun time for pgAdmin. Want to get more news like this? Up to date vulnerability information - snag CVE insights from the App/GoogleStore free today. Current customers get data relevant to their environment. #PatchMyPC #CVEInsights us.portal.patchmypc.com/api/vulnerabil…

Starting #MMSMOA off with a bang. Nothing like starting the week with some PRs

So long San Francisco see you again soon.

The Duck march begins @PatchMyPC the ducks are coming to #RSAC2026 the ducks will find your unpatched apps. And they will patch them. Rejoice. The quackening comes.

This week has been a blast been in person with the most of Patch My PC this week. So much cool stuff around the company and it’s been great to spend time with people outside the tiny screen. Got some runs in with friends too

So I was reading the Patch Notes, as one does on Patch Tuesday.... and.... and.... msrc.microsoft.com/update-guide/v… Notepad... you know that thing on every. single. windows. device. ever. Has an 8.8 RCE vulnerability in it. Related to... rendering markdown. Amazing. #PatchTuesady

I'm really looking forward to this weeks Patch Tuesday Webinar. @bdam555 and I will once again be talking about all the patches, and wild things that have been happening this month. In case you were curious, yes. I'll spend time talking about Notepad++. Register here, to come spend a perfectly. good. hour. listening to us summarize the news we read in the past month, so you didn't have to. patchmypc.com/events/

Sunday long run day. People asking me about what team I support for the Super Bowl. Im team get off the couch and run. I’ve figured out that on long run days I can queue up a ton of work, by dictating GitHub issues into features, then when I’m relaxing after words, I can watch them get coded before my eyes via Claude or GitHub agent flows. Helps fit in marathon training AND community work all at once.

How my whole week has felt

Aside from a few posts here and there, I've been pretty quiet on social media for the past year, both from a blogging and talking perspective. I've been taking a break, from it as I both settled into my new role at work, and to work on building some healthier habits, over sitting at a computer screen for 28 hours a day. What did I do instead? I read some books on my backlog. I got back into running, and lifting, dropped 30+ lbs and ran my first half marathon. Now I'm training for a full marathon at the end of May. I'm finally hitting a point where it's time to really start adding the builder, and community work that I have always loved to be a part of back into the rotation. Soon(TM)

@TheWMIGuy I was trying to avoid the rabbit hole, too easy to say just say "Go Buy Patch My PC, only take updates from us that have been vetted and tested" Also, to me the update supply chain attack is my daily lived reality to help protect, so to me it's not "new" per say.

To me, you've left out a big part, self-updaters. It showed a technique that impacts self-updaters. I assume you didn't want to misuse it for sales purposes. But if you allow self-updaters you trust their content delivery, that should be a conscious decision.

Here is the promised write up. jordantheitguy.com/security/notep…

Those of you who are following the Notepad plus plus scenario. There was an update this morning. notepad-plus-plus.org/news/clarifica… The key takeaway is the *majority* of consumers should take from this message, was implied early on and now has been said definitely. "This was a highly selective attack by a state-sponsored group targeting specific high-value organizations. Security researchers confirmed that the vast majority of Notepad++ users were never affected" I'm going to write up something today, that distills a ton of the information from a bunch of different sources and get it out there. Finaly Takeaway as I said before: If you update to Version Current - and run a sweep to look for any of the listed IOC's - you are **VERY LIKELY** fine. If you used #PatchMyPC - to update, and the self updater was never allowed to run, or called to run you should update to version current - check for IOC's to be safe, but you are likely un-impacted. #Security