If you're in the infosec business you should have a small army of bots looking for new results on google searches of "your-product security/exploit/..." and mon

If you're in the infosec business you should have a small army of bots looking for new results on google searches of "your-product security/exploit/..." and monitoring sec forums, exploit databases and other things as well, regardless of whether you do security properly or not. A 12hrs difference between someone finding news of an exploit and the info getting around to your client or you finding out 12hrs earlier from your bots and be already working on a fix or have it fixed might be the difference between being in and out of business...