Microsoft Probing Whether Leak Played Role in Suspected Chinese Hack

Step 1: Don't patch decade-old flaws

Step 2: Wait for white hats to prove the vulns

Step 3: Wait two months to release a fix after you're notified

Step 4: Send proof-of-concept exploit code to "partners" in China

Step 5: Act shocked and outraged when multiple Chinese groups simultaneously pwn hundreds of thousands of your customers