21% of scanned sites ran old CMS or web server software
http://i1-news.softpedia-static.com/images/news2/Large-Part-of-Popular-Domains-Are-Vulnerable-or-Compromised-476803-2.jpg
Vulnerability percentage per website category.
A scan of 750,000 unique domains in the top 1 million in Alexa’s popularity ranking revealed that about a third of them present risks to the visitors as they have been found to already be compromised or to run vulnerable code that could be exploited for different attacks.
In more than 6% of the cases, some domain classification services identified that malware or spam is being served or the websites are part of a botnet.
Unpatched software is main cause of concern
The research was conducted in mid-January 2015 and published in March by Menlo Security, a cyber-security startup bent on eliminating advanced malware, and involved verification of more than 1.75 million URLs.
Full Article