 |
| New Research Reveals All Companies Using Open Source Code Are at Risk of Supply Chain Attacks |
Checkmarx's 2024 State of Software Supply Chain Security report, based on a survey of 900 AppSec professionals in the US, Europe, and Asia-Pacific, found that every respondent had experienced a software supply chain attack at some point. However, there are promising trends: while nearly two-thirds (63%) reported being victims within the past two years, only 18% suffered an attack within the past year.
The risks are significant, with 75% of AppSec professionals expressing concern—39% being very concerned and 36% concerned. Nevertheless, they are taking proactive steps. Despite more than half (56%) of organizational applications containing open-source packages, 57% of respondents stated that software supply chain security was a top or significant focus area. Over half (54%) are planning to use or are currently investigating potential solutions, and 50% are requesting software bills of materials from their vendors.
Amit Daniel, Chief Marketing Officer at Checkmarx, emphasized the importance of educating developers on new risks and securing the software supply chain. Daniel noted that the open-source ecosystem has seen more attacks in the past two years than ever before, with over 385,000 malicious packages detected by Checkmarx's security research team. "Software supply chain security has become an active target of government regulatory and cybersecurity agencies and is top of mind for over half of global enterprises we surveyed," Daniel said.
0 Comments