x0ry

I stumbled upon a recent zero-day for Microsoft Silver Light (CVE-2016-0034 or KB3126036). Checking my work system, I can see it hasn't yet been patched. It's not my job to keep systems secure, I'm only a developer/analyst but ultimately I want to work my way into information systems security + do the right thing. What do you recommend is the best course of action? Do nothing? Wait? Report it immediately?

15+ years writing software, web, and database code. Am I doing OK with 80k/year + basic benefits living in TN? The Robert Half report reads 140k but my employer is denying it. I made it to the last round of Triplebyte but didnt' make the 1st cut. I'm currently replacing an application a well known company has vested millions in. Should I be asking for more? I'm just not sure how many solutions need to be built before I draw a line in the sand. My skill sets include C#, Javascript, PowerShell, AngularJS, ASP.NET, HTML, CSS, MS-SQL 2008, IIS, Linux, Apache, mySQL, PHP, etc.

EDIT: Loving the feedback, thank you all! For clarification, the market is Cool Springs/Brentwood area about 10-20 minutes outside of Nashville.