Jordan Benzing

I'm a guy that does IT also Security, don’t worry I’m confused too. I work at @PatchMyPC, and I'm one of the admins @WinAdmins - 🦅 Scout

[Jordan Benzing @JordanTheITguy]

I went and did the thing. 26.2 miles.

4:39 minutes chip time.

Now I have to decide if I will do the thing again.

[Jordan Benzing @JordanTheITguy]

Chromium vulnerabilities are tasty.

Also make sure you patch chrome… it used to be like 30vulns a patch now it’s more.

https://t.co/wjfiShqR8q

[Jordan Benzing @JordanTheITguy]

That’s a fun time for pgAdmin. Want to get more news like this? Up to date vulnerability information - snag CVE insights from the App/GoogleStore free today.

Current customers get data relevant to their environment.

#PatchMyPC #CVEInsights https://t.co/VbPgg0GaK3

[Jordan Benzing @JordanTheITguy]

Starting #MMSMOA off with a bang.

Nothing like starting the week with some PRs

[Jordan Benzing @JordanTheITguy]

So long San Francisco see you again soon.

[Jordan Benzing @JordanTheITguy]

The Duck march begins @PatchMyPC the ducks are coming to #RSAC2026 the ducks will find your unpatched apps.

And they will patch them. Rejoice. The quackening comes.

[Jordan Benzing @JordanTheITguy]

This week has been a blast been in person with the most of Patch My PC this week. So much cool stuff around the company and it’s been great to spend time with people outside the tiny screen. Got some runs in with friends too

[Jordan Benzing @JordanTheITguy]

So I was reading the Patch Notes, as one does on Patch Tuesday.... and.... and....

https://t.co/Zet6ybGCy3

Notepad... you know that thing on every. single. windows. device. ever. Has an 8.8 RCE vulnerability in it. Related to... rendering markdown. Amazing.

#PatchTuesady

[Jordan Benzing @JordanTheITguy]

I'm really looking forward to this weeks Patch Tuesday Webinar.

@bdam555 and I will once again be talking about all the patches, and wild things that have been happening this month. In case you were curious, yes. I'll spend time talking about Notepad++.

Register here, to come spend a perfectly. good. hour. listening to us summarize the news we read in the past month, so you didn't have to.

https://t.co/9tmpvQaoxA

[Jordan Benzing @JordanTheITguy]

Sunday long run day. People asking me about what team I support for the Super Bowl. Im team get off the couch and run.

I’ve figured out that on long run days I can queue up a ton of work, by dictating GitHub issues into features, then when I’m relaxing after words, I can watch them get coded before my eyes via Claude or GitHub agent flows. Helps fit in marathon training AND community work all at once.

[Jordan Benzing @JordanTheITguy]

How my whole week has felt

[Jordan Benzing @JordanTheITguy]

Aside from a few posts here and there, I've been pretty quiet on social media for the past year, both from a blogging and talking perspective.

I've been taking a break, from it as I both settled into my new role at work, and to work on building some healthier habits, over sitting at a computer screen for 28 hours a day.

What did I do instead? I read some books on my backlog. I got back into running, and lifting, dropped 30+ lbs and ran my first half marathon. Now I'm training for a full marathon at the end of May.

I'm finally hitting a point where it's time to really start adding the builder, and community work that I have always loved to be a part of back into the rotation.

Soon(TM)

[Jordan Benzing @JordanTheITguy]

@TheWMIGuy I was trying to avoid the rabbit hole, too easy to say just say "Go Buy Patch My PC, only take updates from us that have been vetted and tested"

Also, to me the update supply chain attack is my daily lived reality to help protect, so to me it's not "new" per say.

[Jordan Benzing @JordanTheITguy]

Here is the promised write up.

https://t.co/PL0VvDO9gj

[Jordan Benzing @JordanTheITguy]

Those of you who are following the Notepad plus plus scenario. There was an update this morning.

https://t.co/O5rYVqmnaL

The key takeaway is the *majority* of consumers should take from this message, was implied early on and now has been said definitely.

"This was a highly selective attack by a state-sponsored group targeting specific high-value organizations. Security researchers confirmed that the vast majority of Notepad++ users were never affected"

I'm going to write up something today, that distills a ton of the information from a bunch of different sources and get it out there.

Finaly Takeaway as I said before: If you update to Version Current - and run a sweep to look for any of the listed IOC's - you are **VERY LIKELY** fine.

If you used #PatchMyPC - to update, and the self updater was never allowed to run, or called to run you should update to version current - check for IOC's to be safe, but you are likely un-impacted.

#Security

[Jordan Benzing @JordanTheITguy]

I promised I would write something about Notepad++

Here you go, a simplified version, of the overall infrastructure compromise that happened last year, and only now are we starting to wrestle with.

https://t.co/PL0VvDO9gj

#Security #patching

[Jordan Benzing @JordanTheITguy]

@fbi__open__up Code signing keys you say… you mean the certificate codes cert they lost and had to replace with a local on premi code signing cert they made?

[Jordan Benzing @JordanTheITguy]

All this technology stuff is cool and all.

But did you take care of yourself today? Did you go for a walk? Maybe a run? Get enough sleep? Lift some heavy things and eat right? The computer will be there tomorrow, promise make sure you take care of you.

[Jordan Benzing @JordanTheITguy]

@SCCM_Ryan @PatchMyPC Can confirm. Did spend half the day in that morass. Am big nerd.