For example, in this week's Patch Tuesday, there were 56 vulnerabilities addressed in the nine bulletins -- but 41 of those were part of the single Internet Explorer cumulative update.
"This is analogous, in my mind, to when economic data is presented," Ernst said. "There's a general increase or decrease in GDP, but then most economists take a look at the data excluding food and energy prices which are highly dynamic. If we remove Internet Explorer from the data, I bet that number is a lot more stable."
Sign up for CIO Asia eNewsletters.