Incomplete patches are allowing attackers to continue exploiting the same vulnerabilities, reducing the cost to compromise.