This episode reports on CISOs cutting back on the number of security vendors they buy from, unsecured medical devices, Windows updates and more