A VPS you stood up six months ago and rarely log into is the most dangerous machine you own. It is still serving traffic, still listening on its open ports, and still running whatever package versions it had the day you walked away — including the ones with public exploits published last week. Patch hygiene is the …