A report released by the SANS Institute has found that the greatest security risks are found in vulnerabilities to client and Web applications, but most organizations spend the least amount of time securing those areas, says CSO.com. The report states that:

“On average, major organizations take at least twice as long to patch client-side vulnerabilities as they take to patch operating system vulnerabilities. In other words, the highest priority risk is getting less attention than the lower priority risk.”

BusinessWeek adds that perhaps IT experts should get past the Windows vs. Mac vs. Linux debates and move on to securing the software that runs on those operating systems, such as Adobe, Java and QuickTime.