The Equifax breach, as an example, was traced back again to the vulnerability in the Apache Struts World-wide-web server software package. If the corporation experienced mounted the security patch for this vulnerability it could have avoided the situation, but from time to time the software update itself is compromised, https://ieeexplore.ieee.org/document/9941250