Cybercriminals will innovate when necessary. However, more likely, like any successful enterprise, they will harvest any low-hanging fruit when and wherever they can find it. For those of us with unpatched older vulnerable systems – they are the primary cause of the vast majority of security breaches. It is why, as Fortinet researchers recently discovered that cybercriminals target vulnerabilities ten or more years old more often than they focus on new attacks. And in fact, they target vulnerabilities from every year between 2007 and now at the same rate as they do vulnerabilities discovered in 2018 and 2019.