It takes a hacker 48 hours to exploit a vulnerability. Why does it take 43 days to patch it?