Report says 90 percent of successful exploits these days involve vulnerabilities for which a patch has been available for six months or longer