Are Software Updates Useless Against Advanced Persistent Threats?

A dilemma worth Shakespeare’s Hamlet is increasingly haunting companies and security researchers: to update or not to update, this is the question. From the perspective of recommended common practices by software vendors the answer is unambiguous: you should keep your software up-to-date. But is common sense always good sense? We argue it is not.