Application security has come a long way and is mainstream and is being reported in media like The Wall Street Journal and CNN. The last few years has seen myriad application-related meltdowns from Stuxnet, Duqu 1 and 2 and more. Application security is at the core of information security, primarily due to the fact that most data breaches and compromises result from security related vulnerabilities contained within applications. The challenge is getting motivated to both hit the treadmill, and to ensure secure code is being written and delivered into production applications.”]
Source: https://www.csoonline.com/article/2974644/pci-and-application-security-part-1.html