Change management: Equifax highlighted the vulnerability gap between disclosure and patch