According to a recent estimate from Verizon, 90 percent of successful exploits these days involve vulnerabilities for which a patch has been available for six months or longer.
"For the overwhelming majority of attacks exploiting known vulnerabilities, the patch had been available for months prior to the breach," Verizon says on page 15 of its 2008 Data Breach Investigations Report. "Also worthy of mention is that no breaches were caused by exploits of vulnerabilities patched within a month or less of the attack."
Ad Choices