The Equifax breach, by way of example, was traced back into a vulnerability within the Apache Struts Net server application. If the business had installed the security patch for this vulnerability it might have averted the problem, but at times the software update by itself is compromised, as was https://ieeexplore.ieee.org/document/9941250