Firms leave cyber vulnerabilities unpatched for months, study shows

Almost nine in 10 major companies exposed to actively exploited cyber vulnerabilities remain at risk for six months or more, despite available fixes, according to a new study by cyber risk analytics provider KYND.

The analysis examined more than 2,000 organizations, including companies from the FTSE 350 and S&P 500. Researchers found that 11% were exposed to actively exploited vulnerabilities, security weaknesses currently leveraged in real-world attacks. Of those exposed, 88% remained vulnerable for at least six months.

KYND’s analysts identified risks affecting critical infrastructure and enterprise software. Exposure spanned web applications and widely used platforms such as Oracle, WordPress, and Apache, as well as networking hardware and secure communication protocols that businesses rely on daily. The findings point to widespread delays in essential maintenance and a persistent gap between detection and remediation of vulnerabilities.

Read more at Insurance Business