The problem isn’t limited to legacy technology. New devices are coming online with critical vulnerabilities.