42 percent of applications suffer from 'security debt'

A new report from Veracode shows that software security debt -- flaws that have gone unfixed for over a year -- is found in 42 percent of applications. Although the number of high-severity flaws has reduced 70.8 percent of organizations still suffer from security debt. 45.9 percent have critical security debt, that is high-severity flaws that have been unfixed for 12 months or more. When looking at where these flaws occur the report finds that only 10.6 percent of security debt is accounted for by third-party code. However, third-party code makes for 65.4 percent of critical debt. Third-party flaws take… [Continue Reading]