businesses still affected by older security vulnerabilties