Across organizations in Europe, LinkedIn is the most commonly used personal app at 89%, followed by Google Drive at 84% and ChatGPT at 82%.

The average application is exposed to 81 confirmed, viable attacks each month that evade other defences

Developer teams remediate, on average, 6 application vulnerabilities per month.

Attackers exploit new application vulnerabilities in just 5 days.

On average, applications contain 30 serious vulnerabilities.

Applications face an average of 17 new application vulnerabilities per month.

The average application is targeted by attackers once every 3 minutes.

It takes an average of 84 days to patch even the most critical flaws in applications.

70% of respondents admitted that when a fix is not available for a vulnerability, they either don’t have or are not sure if they have a remediation plan in place

Almost half (48%) of security professionals are falling behind global SBOM compliance regulations.

47% of security professionals have not started SBOM integration or are presently evaluating tools and practices.

68% of security professionals feel uncertain about achieving the near-impossible outcome of zero-vulnerability software.

A substantial 34% of security professionals reported difficulty in accurately identifying and tracking open-source components.

38% of respondents noted they prioritize the most vulnerable areas within their applications.

32% of security professionals think they can deliver zero-vulnerability software.

GPT4 can write exploits for 87% of known vulnerabilities.

26% of security professionals said AI code generation and vibe coding risks were the most pressing or high-stakes issue AI creates for organizations today.

95% of software weaknesses are directly attributable to open-source code.

Nearly a third (29%) of teams still lack the tools and processes needed to analyze SBOMs for vulnerabilities.

35% of security professionals said data security and privacy risks was the most pressing or high-stakes issue AI creates for organizations today.