OSC&R report: 95% of organizations face severe software supply chain risk

OSC&R's analysis reveals pervasive software supply chain security weaknesses: 95% of organizations had at least one high/critical risk, many applications exhibit runtime exposures and longstanding flaws (e.g., command injection, sensitive data in logs, XSS), and AppSec teams are overwhelmed by alert volumes; the report argues for automation, contextual analysis, improved secure-by-design practices, and a prevention-focused approach to reduce noise and remediate critical issues.