Large companies with over $1 billion in revenue are more than twice as likely to knowingly leave high or critical vulnerabilities unpatched compared to smaller businesses, based on information published by Infosecurity Magazine.
A study by Chainguard revealed that 66% of security leaders in companies with over $1 billion in revenue admitted to sometimes leaving critical vulnerabilities unpatched, versus 27% in companies under $250 million. Larger organizations cited business trade-offs and operational disruption as primary barriers, while smaller firms struggled with capacity constraints like testing patches. In response, many companies are reallocating staff, hiring new security and engineering personnel, adopting secure-by-default software, reducing third-party dependencies, and increasing scanning frequency. The research also highlighted the significant impact of AI on cybersecurity, with 91% of respondents stating AI-accelerated attacks have most changed their jobs in the past decade. Nearly all surveyed expressed concern about the speed of remediation for AI-driven exploits and the need for greater urgency from senior leadership. AI-accelerated attacks are also contributing to burnout among security leaders, impacting their organizations' ability to defend against these evolving threats.
Source: Infosecurity Magazine
