Security researchers warned Kaseya about its IT management software in April, but the patches didn't come fast enough to avert last week's disaster.