Our behavioral approach is repeatedly validated by its detection and mitigation of day-zero threats like this one. Even if a patch were available, IT administrators will be hesitant to implement it immediately, given the recent history of untested Microsoft patches bringing down networks. So IT has to decide between implementing untested patches, and letting the patch age, putting users' machines and thus the network's security in jeopardy. Scott Olson