Microsoft is actually pretty good about warning users about active attacks abusing unpatched vulnerabilities in Internet Explorer. — Harris et al, Gray Hat Hacking: The Ethical Hacker's Handbook (2007).
When working with kernel patches, it's a good idea to apply them to a clean, unpatched kernel. — Derek Vadala, Managing RAID on Linux (2003).