The DROWN vulnerability is one of the biggest vulnerabilities to hit since Heartbleed. By exploiting the obsolete SSLv2 protocol, this flaw makes it possible for an attacker to eavesdrop on a SSL session. The longer it takes to deal with a known vulnerability, the higher your risk of a successful attack. Known vulnerabilities still pose the biggest IT security threats, says Michelle Drolet. 44% of data breaches in the U.S. and Europe are caused by known vulnerabilities, she says.”]
Source: https://www.csoonline.com/article/3046574/hundreds-of-cloud-apps-still-vulnerable-to-drown.html