Half of breached firms say they were compromised due to a vulnerability for which a patch was available but not applied.
Source: Threadpost