Thanks for posting this. Anyone commenting in this thread really needs to read the report as it paints the picture of their security hygiene. When I read things

Thanks for posting this. Anyone commenting in this thread really needs to read the report as it paints the picture of their security hygiene. When I read things like 30% of all their endpoints have automatic updates disabled, and 40% reporting out of compliance, I'm picturing a real immature cowboy culture of arrogant developers that think they're above security policies, and no one at the helm to rope them into line. Sounds like they have no security culture, just policies. Security is something that begins with the individual.