Go beyond vulnerabilities for your AppSec: Here's why it's essential

The report warns that 2024 saw a substantial rise in active exploit activity—768 distinct vulnerabilities exploited (about a quarter exploited at or before public disclosure)—and a large increase in CVE disclosures, exposing gaps in NVD/KEV coverage and driving the need to move beyond patching. It emphasizes the escalating risk from software supply chain attacks and recommends reducing software footprint, adopting chaos engineering and ML-driven anomaly detection, hardening development environments (CIS benchmarks, MFA, microsegmentation), and shifting toward binary analysis and reproducible builds to detect malicious supply-chain tampering.