Two Reports Offer Competing Explanations for Cybersecurity’s Growing Crisis
Summary
A CSA survey commissioned by Miggo links security gaps to poor runtime visibility and slow vulnerability remediation. FireMon’s report instead points to weak firewall-policy oversight, including unused and undocumented rules.
Key points
- The CSA report, commissioned by Miggo, surveyed more than 900 cybersecurity leaders; 82% of organizations reportedly lack effective runtime visibility.
- In the survey, 80% of organizations reported at least one incident involving a known vulnerability in the prior year. Only 9% remediate critical vulnerabilities within 24 hours.
- The CSA report found a 97% incident rate among organizations taking four or more days to patch, compared with 67% among those taking three days or less.
- The report says 73% would adopt virtual patching with greater confidence in low false-positive rates, while 17% configure WAFs for automatic blocking.
- FireMon’s report attributes security-policy risks to operational oversight: 45% of firewall rules reportedly lack an owner or documentation, 17% are redundant or shadowed, and 69% are unused.
- The article contrasts the reports’ explanations: CSA emphasizes gaps in security capabilities and runtime context, while FireMon emphasizes management of existing tools.
Article Details
- Publisher
- SecurityWeek
- Report Period
- Both reports were published on 2026-06-02.
- Scope
- Competing explanations for cybersecurity challenges: application and AI security, vulnerability response, runtime protection, and firewall policy management.
- Sample Size
- The Cloud Security Alliance report surveyed more than 900 cybersecurity leaders; no sample size is provided for the FireMon report.
- Key Statistics
- 82% of surveyed organizations lack effective runtime visibility.
- 80% of surveyed companies experienced at least one incident involving a known vulnerability in the previous year.
- Only 9% remediate critical vulnerabilities within 24 hours; 74% take one to seven days.
- Organizations taking four or more days to patch had a 97% incident rate, compared with 67% for those taking three or fewer days.
- In the FireMon report, 45% of firewall rules lacked an owner or documentation, 17% were redundant or shadowed, and 69% were unused.
- Recommendations
- Improve visibility into vulnerability exploitability and application context to support prioritization and faster remediation.
- Improve runtime monitoring and protection, and increase confidence in virtual patching and automated blocking.
- Use network segmentation, microsegmentation, and continuous policy governance to reduce attack surface and limit blast radius.
People
Vendors
FireMonA separate FireMon Insights report, also published June 2, 2026, suggests that concern over the automated use of firewalls as a security barrier is unsurprising but at least partially due to a lack of human oversight.Miggo SecurityIt is exposing the fact that companies cannot fix known vulnerabilities fast enough,” explains Daniel Shechter, CEO and co-founder at Miggo Security.