Jamf’s 2026 Security 360 Report reveals a systemic patch discipline crisis across enterprise Apple fleets: 53% of organizations are running critically out-of-date operating systems, and 95% of assessed applications carry at least one medium-severity or higher vulnerability. These findings signal that Apple’s growing enterprise footprint has outpaced the security hygiene programs designed to manage it, leaving organizations exposed to known, exploitable weaknesses rather than novel threats. For CISOs, this is a policy and governance failure as much as a technical one, the threat surface exists not because attackers are sophisticated, but because patch cycles are broken.