A researcher has come out with a pretty interesting statistic on how many applications in the wild remain unpatched. The 20% figure is likely even low because the people that would go to the trouble of downloading its "patch watching" client software are presumably savvy enough to be trying to keep their software updated. The Network World story reports: "One in five applications installed on Windows PCs are missing security patches, a Copenhagen-based vulnerability tracker has reported. According to Secunia APS, more than 20% of the applications scanned by its Personal Software Inspector (PSI) utility were open to attack because available fixes for security flaws had not been applied."

Click to read the article this is in response to.