Veracode released its security analysis of 4,835 applications submitted to the firm for evaluation during an 18-month period. The report found that 66 percent of applications developed by the software industry had unacceptable security quality. The finance and software industries request the most formal verification, or vetting, of the software quality of third party suppliers. Some analysts felt the data showing raw vulnerability numbers doesn’t shed much light on how well companies may be doing in their efforts to develop more secure applications. In the Payment Card Industry Data Security Standard, 8 out of 10 applications failed to pass the OWASP Top 10.”]
Source: https://www.csoonline.com/article/2128073/the–sorry–state-of-software-security.html