Approximately one-third of all IT systems have critical security deficits or misconfigurations; 65 percent of attacks exploit known, already-patched vulnerabilities.