In the hacking world, security is more of a response than a proactive measure. They wait for hackers to attack and then they patch, based on the attacks.