Google: Vulnerabilities being actively exploited by hackers should be made public seven days after vendor is made aware of flaw. Seven days is an aggressive timeline and may be too short for some vendors to update products, engineers say. Google’s zeal for quick action may be a harsh solution that could do more harm than good, says Trusteer Vice President Yishay Yovel. Microsoft, for example, once took seven years to patch a known vulnerability, but now is very diligent about patching its software.”]