Tech »  The patching treadmill: Why traditional application security is no longer enough