IBM, HP, Microsoft Lead Security Patching Laggards

IBM, Hewlett-Packard and Microsoft led the list of companies that failed to patch security vulnerabilities within six months of being notified by the world's biggest bug bounty program, according to HP TippingPoint's Zero-Day Initiative (ZDI).

And you would have thought, these are market leaders!

Read the whole story here

This is a lesson in reality versus perception.

Take IBM, always appears like the self respecting, always truies to do the right thing and so on .. but see how they take security patching lightly as evident by their slow releases.

On the other hand, Oracle with its secind hand car selesman approach, alway hungry for money, alway asking for his deal .. maybe not seen as the most fair company to its customers, but hey, they do a much better job than IBM releasing security patches .. at least according to this report.

So perception versus reality!

Yes somewhat surprising to see IBM not in the forefront of releasing patches in a timely fashion.

But it is not surprising that big companies will be slower .. you hate it but you know it will be true at all times

But Oracle, the company every one like to pick on does better than the angels (like IBM) in terms of timeliness of resolving security vulnerabilities and issuing patches.

Things are not always as they seem.