Survey: 75% of Organizations Ship Code with Known Vulnerabilities (infosecurity-magazine.com)

• 75% of firms knowingly ship vulnerable code.
• AI-generated code often lacks security review.
• Majority do not audit third-party suppliers adequately.

"A new industry survey reveals that three-quarters of organizations knowingly release software containing unresolved vulnerabilities. The report highlights growing concern over AI-generated code, which often bypasses traditional security reviews and introduces unvetted components into supply chains. Unaudited third-party suppliers further compound the risk. The findings underscore a persistent gap between awareness and action in software security, with many firms prioritizing speed over thorough testing. The survey urges tighter integration of automated security scanning and stricter vendor oversight to mitigate the expanding attack surface."