Companies keep getting breached by vulnerabilities they already knew about

A survey of 300 IT and security leaders finds that while automated scanning widely detects vulnerabilities, remediation largely depends on manual handoffs and unclear ownership, causing delays that frequently turn known vulnerabilities into incidents; only a small minority have fully automated end-to-end remediation and verified rescans, and organizations using looser definitions of 'fixed' are substantially more likely to suffer breaches tied to previously tracked weaknesses.