How would you handle a situation where a critical vulnerability is discovered just before a major release at New York Power Authority?