Patching, as always.

And how many times have we all been bitten by a small hole (such as VPN) in our corporate perimeter being used as an infection vector to compromise all of our unpatched PCs?