75% of Firms Deploy Vulnerable Code Amid Pressure on CISOs, Report Finds

A Checkmarx survey of 2,350 CISOs, AppSec managers and developers across 14 countries found 95% faced pressure to deprioritize or delay reporting security issues, 75% acknowledged deploying vulnerable code to production, and only 9% fix over 90% of vulnerabilities within 90 days; the report warns that reliance on AI-generated code and organizational pressures increase security risk and calls for stronger governance and new remediation models.