Three priorities every App Sec leader should be focused on
Summary: PortSwigger Research cites Verizon's 2020 Data Breach Investigations Report finding that 43% of security breaches involved web application attacks, a 50% growth rate over the previous year, and ISACA's State of Cybersecurity 2020 report showing 57% of organizations have unfilled cybersecurity positions. It also cites Sonatype's DevSecOps Community Survey finding 52% of developers know application security is important but lack time for it, and GitLab's 2020 DevSecOps report stating 53% of respondents feel red tape slows their bug-fixing efforts.
Bottom line: Nearly six in ten organizations cannot fill their security seats while web application attacks grew 50% in a single year, so the argument for automating routine scanning and reserving manual pentesting for where it counts is a resourcing decision, not a tooling preference.
Read the original at PortSwigger Research ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026