security gaps