IT managers who solely rely on Microsoft's WSUS patch management updates have been criticised.