Organizations should fear misconfigurations more than vulnerabilities

According to the State of the Internet Report by Censys, misconfigurations – including unencrypted services, weak or missing security controls, and self-signed certificates – make up roughly 60% of observed risks.