It's essentially blowback from the number-one security problem being out of date software with known vulnerabilities. It's also easy to measure without deeper k

It's essentially blowback from the number-one security problem being out of date software with known vulnerabilities. It's also easy to measure without deeper knowledge of the system, so it gets focused on to the detriment of strategies based on deeper analysis and reducing overall attack surface.