How to Identify and Patch a Machine at Risk