How Do Vulnerabilities Get Into Software?

There isn't a business today that doesn't produce or purchase applications in order to run more efficiently. Software powers everything from our critical infrastructure and healthcare to commerce and financial systems. This growing dependence on software does improve efficiencies, but at a cost. It also makes businesses more susceptible to some of the most common forms of cyberattacks — attacks at the application layer.
In fact, U.S. Department of Homeland Security (DHS) research found that 90 percent of security incidents result from exploits against defects in software.
With so many breaches caused by application vulnerabilities, it would be simple to shame companies for not sufficiently securing the code they produce and making sure the code they purchase and borrow is also secure. However, the reality is, there are multiple reasons for insecure code. Introducing secure coding practices and initiating an application security program can go a long way toward reducing vulnerabilities and strengthening security.