How to prioritize patching in the exploit storm