Chuvakin offers 30-day action recommendations: focus on mitigation rather than fixating on patching; figure out how agents (including shadow agents) are operating in the environment; edge devices must be patched, and you cannot mitigate a firewall with a firewall.