Data breaches are almost the norm for many businesses these days

Data Breach
(Image credit: Shutterstock)

A global survey of app security managers has revealed that a majority (91%) of the respondents had experienced security breaches in the last year as a direct result of a vulnerable application.

Compiled by cybersecurity specialists Checkmarx, the report shares alarming trends in breaches and supply chain loopholes, based on a survey of over a thousand AppSec managers and developers.

“Security breaches within the enterprise have unfortunately become a societal norm, so identifying those gaps and creating the solutions to eliminate them is integral to the success of businesses today,” said Maty Siman, Checkmarx founder and CTO. 

TechRadar needs you!

We're looking at how our readers use VPNs with streaming sites like Netflix so we can improve our content and offer better advice. This survey won't take more than 60 seconds of your time, and we'd hugely appreciate if you'd share your experiences with us.

>> Click here to start the survey in a new window <<

Surprisingly, over half of the respondents (54%) blame the shift to the cloud, saying that the move increased their concerns around secure application development.

Identifying loopholes

Securing the supply chain emerged as one of the challenges of ensuring application security. More than a quarter (26%) of the respondents cited “gaining visibility into open source packages being utilized in custom applications” as the biggest challenge when it comes to visualizing and securing software supply chains. 

Still, despite facing multiple breaches in the last year due to vulnerable applications, an overwhelming majority (81%) of developers say they can build a secure product.

Just about half (49%) of all surveyed software developers said they are adopting a DevSecOps model with security as a supply chain focus in order to reduce the risk of a breach, with 42% of AppSec managers saying the same.  

The report also revealed that following an AppSec-related incident, 38% of AppSec managers and software developers said their organizations deployed penetration testing exercises to prevent future breaches, while 40% of software developers stated their organizations issued mandatory AppSec training. 

Protect your network with the help of these best firewall apps and services, and ensure your computers are running these best endpoint protection tools to shield them from cyber-attacks.

Mayank Sharma

With almost two decades of writing and reporting on Linux, Mayank Sharma would like everyone to think he’s TechRadar Pro’s expert on the topic. Of course, he’s just as interested in other computing topics, particularly cybersecurity, cloud, containers, and coding.

Read more
API
Businesses are being plagued by API security risks - with nearly 99% affected
Holographic representation of cloud computing over open businessman&#039;s hand
Businesses are struggling to address vulnerabilities hidden in phantom dependencies
Security padlock in circuit board, digital encryption concept
A guide to integrating application security into any cyber defense strategy
A digital themed isometric showing a neon padlock in the foreground, and a technological diagram of a processor logic board in the background.
Third-party data breaches have become a major security concern
Hacker Typing
Racing against time on a menacing caldera: survey finds majority of organizations take days to tackle critical vulnerabilities, each of them a potential open goal for cybercriminals
Best email services: image of email with one unread message alert
Over 400 million unwanted and malicious emails were received by businesses in 2024
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
DeepSeek
Deepseek’s new AI is smarter, faster, cheaper, and a real rival to OpenAI's models
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring