Software vulnerabilities continue to be discovered on a daily basis, and it can often be a race against the hacker to apply relevant updates and remediate a vulnerability before the weakness is exploited. This is particularly the case for zero-day vulnerabilities, where hackers have the advantage of a newly exposed vulnerability for which a patch is not yet available.
Establishing and enforcing a robust process for managing vulnerabilities is imperative, but can demand significant resources and time, adding to the cost of software ownership.
