<p>Researchers say organizations should have detected and secured them sooner</p>