https://patchvex.com Security research, CVE breakdowns, and engineering articles from PatchVex. en-us hello@patchvex.com (PatchVex) hello@patchvex.com (PatchVex) Fri, 02 Oct 2026 21:28:56 GMT https://patchvex.com/og-default.png https://patchvex.com https://patchvex.com/blog/dpdp-act-vs-dpdp-rules https://patchvex.com/blog/dpdp-act-vs-dpdp-rules The Digital Personal Data Protection Act, 2023 is the law. The Digital Personal Data Protection Rules, 2025 tell you how to actually implement it. Here's the difference, the real enforcement timeline, and what it means for engineering teams. Mon, 14 Sep 2026 00:00:00 GMT PatchVex Engineering DPDPIndiaData ProtectionCompliancePrivacy https://patchvex.com/blog/how-to-find-pii-in-your-codebase https://patchvex.com/blog/how-to-find-pii-in-your-codebase You can't secure or govern personal data you don't know you have. A practical guide to finding email addresses, phone numbers, ID numbers, and embedded credentials hiding in your source code and config — before a compliance deadline or a breach forces the question. Mon, 14 Sep 2026 00:00:00 GMT PatchVex Engineering PII DetectionData DiscoveryPrivacyDPDPSecrets Detection https://patchvex.com/blog/privacy-as-code-explained https://patchvex.com/blog/privacy-as-code-explained Privacy policy as a deterministic, version-controlled check that runs in CI — not a questionnaire, not a quarterly audit. What Privacy-as-Code actually is, what it can and can't verify, and why that honesty matters. Mon, 14 Sep 2026 00:00:00 GMT PatchVex Engineering Privacy-as-CodePrivacyDPDPCI/CDPII Detection https://patchvex.com/blog/cvss-vs-epss-vs-cisa-kev https://patchvex.com/blog/cvss-vs-epss-vs-cisa-kev Three vulnerability signals, three different questions. A practical guide to what CVSS, EPSS, and CISA KEV each measure, how they disagree, and how to combine them into a real prioritization workflow. Fri, 21 Aug 2026 00:00:00 GMT PatchVex Engineering CVSSEPSSCISA KEVVulnerability ManagementVulnPilotVulnerability Prioritization https://patchvex.com/blog/what-is-cisa-kev https://patchvex.com/blog/what-is-cisa-kev CISA's Known Exploited Vulnerabilities catalog tracks CVEs with confirmed active exploitation. Here's what it is, why it's the strongest remediation signal available, and how to use it alongside CVSS. Fri, 21 Aug 2026 00:00:00 GMT PatchVex Engineering CISA KEVCVSSVulnerability ManagementVulnPilot https://patchvex.com/blog/what-is-epss-score https://patchvex.com/blog/what-is-epss-score EPSS predicts the probability a CVE will be exploited in the next 30 days. Here's what the score actually represents, how it differs from CVSS, its limitations, and how to use it in prioritization. Fri, 21 Aug 2026 00:00:00 GMT PatchVex Engineering EPSSCVSSCISA KEVVulnerability ManagementVulnPilot https://patchvex.com/blog/security-checks-for-ai-built-apps https://patchvex.com/blog/security-checks-for-ai-built-apps LLMs write functional code fast. They also reproduce the same security gaps consistently. Here's what to check before you ship an app built with Cursor, Claude, or Copilot. Sat, 20 Jun 2026 00:00:00 GMT PatchVex Engineering AI CodingCursorClaude CodeSecurity HeadersAPI KeysLaunch Checklist https://patchvex.com/blog/why-cvss-alone-is-not-enough https://patchvex.com/blog/why-cvss-alone-is-not-enough CVSS scores severity if exploited — not whether anyone is. Here's how CISA KEV and EPSS close that gap, with a practical composite scoring model. Sat, 15 Nov 2025 00:00:00 GMT PatchVex Engineering CVSSEPSSCISA KEVVulnerability ManagementVulnPilot