"Even with a good patch management strategy in place, trying to get 100 percent complete coverage is futile," says Chris Morales, head of security analytics at Vectra. "Then there are the vulnerabilities that we don't know about. At some point, attacks succeed. We can slow attacks down, but we can't stop them completely. Something always finds a way through."