Which of the following is true about OS security?

a$.$ Security flaws discovered by white hats are used to get ransom from vendors.

b$.$ Black hats are paid by OS vendors to test for vulnerabilities.

c$.$ Security flaws discovered by white hats are reported to the OS vendor.

d$.$ Security updates should only be installed if an OS is under attack.