Equifax blames months-old web server flaw for allowing hack - CNET

Patches published months before the massive hack began were apparently not applied before the hack.