Exploitable Vulnerabilities Present in 87% of Organizations

Datadog's State of DevSecOps report finds that 87% of organizations have at least one exploitable vulnerability in production (affecting ~40% of services), with Java, .NET and Rust among the most impacted; the report argues that contextualizing CVE severity with runtime and exploitability reduces the number of issues requiring immediate action and warns that both outdated dependencies and overly rapid adoption of new library versions increase supply-chain and pipeline risk—recommending practices such as pinning dependency SHAs and prioritizing fixes by real risk.