65% of organizations prioritize vulnerabilities based on risk