https://www.securityprivacyrisk.com/companies-leave-vulnerabilities-unpatched-for-up-to-120-days/