Nearly half of small and midsize businesses failed to fix a known vulnerability for six months or more, according to ...