Organizations knowingly ship vulnerable code amid shrinking exploit windows