Security is a process, not a product.
Myth #
Many companies just want to sell you a product that they tell you will solve all your problems. That is - most often - simply not true, so we are not going to perpetuate that myth!
Process #
Security is a process, not a product. Products provide some protection, but the only way to effectively secure your business is to put a defensible architecture with good processes in place that recognize the inherent insecurity of products. The trick is to improve your security posture regardless of the products or patches.