There's been the usual flurry this week over a freshly disclosed vulnerability, the kind that gets a logo before it gets a sensible writeup. My feeds went from zero to "patch everything immediately" in about an hour, which is roughly the point where I stop reading threads and go and check my own estate instead.
The honest part of incident response is rarely the patch. It's the inventory. "Are we affected" should be a five-minute question and it almost never is, because nobody can say with confidence which versions are running where. That's the bit that bites. The fix this week was trivial once we knew where it needed to go; finding everywhere it needed to go took the afternoon.
So I'm not panicking, but I am quietly grateful for the prompt. It sent me back to the asset list I keep meaning to tidy and never do. The real lesson of every scary disclosure isn't the bug itself, it's whether you can answer the inventory question before the clock starts. This week I mostly could, with a couple of embarrassing gaps. Those gaps are now tickets.