<A href="http://www.networkworld.com/news/2012/010912-big-it-vendors-lead-patching-254644.html?source=nww_rss" target="_blank">The TippingPoint Zero-Day Initiative (ZDI) notifies IT vendors</A> about vulnerabilities in their software. If the bugs aren't fixed in six months, TippingPoint goes public. But not all vendors respond quickly.