82% of organizations are carrying the vulnerabilities attackers are targeting

The DBIR and SOSS reports don't just align — they explain each other.

Webinar   The New #1 Cause of Breaches   Learn why vulnerability exploitation is the new top breach vector and how to respond   SAVE YOUR SPOT     Two reports. One crisis. The 2026 DBIR: vulnerability exploitation is now the #1 breach vector, up 55% YoY. Only 26% of CISA KEV vulnerabilities were fully remediated. Median time to close a critical flaw: 43 days. Veracode's SOSS: 82% of organizations carry unresolved security debt. The most dangerous class of flaws — high severity AND high exploitability — grew 36% in a single year. On July 22 at 11am ET, the teams behind both reports discuss what this convergence means — and what to do about it. Can’t make it live? Register anyway and we will send over the recording as soon as it is available.     SAVE YOUR SPOT       36 Queen Street London, EC4R 1BN United Kingdom     emea@veracode.com      +44 (0)20 3761 5501 © 2026 Veracode Inc. All rights reserved. Unsubscribe  |  Manage preference