In an industry so concerned with prognostication, it’s common practice to treat the newest vulnerabilities, exploits, and other threats as the ones most urgently needing attention. We talk about zero-day exploits in raised voices and rush to develop expertise in new technologies. Consequently, the result of this future bias is that older vulnerabilities in our systems are often ignored and left unpatched. Many threat actors have no problem with taking an atavistic approach, however.
