Older bugs in the AnyConnect Secure Mobility Client are being targeted in the wild, showcasing patch-management failures.