73% of security leaders reported receiving at least one notification of a software supply chain vulnerability or incident within the past year.

July 31, 2025

73% of security leaders reported receiving at least one notification of a software supply chain vulnerability or incident within the past year. — This cybersecurity statistic was published by Cobalt in July 2025. It covers topics including Supply chain risk, Software supply chain. The original data appears in CISO Perspectives Report: AI and Digital Supply Chain Risks. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 7/31/2025

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

73% of security leaders reported receiving at least one notification of a software supply chain vulnerability or incident within the past year. This data was published by Cobalt and covers Supply chain risk, Software supply chain.

Where does this data come from?

This statistic comes from CISO Perspectives Report: AI and Digital Supply Chain Risks, published by Cobalt on July 31, 2025. You can view the original report at https://resource.cobalt.io/ciso-perspectives-report.

What cybersecurity topics does this cover?

This statistic relates to Supply chain risk, Software supply chain. Browse more statistics on Supply chain risk or from Cobalt.

CYBERSTATS

73% of security leaders reported receiving at least one notification of a software supply chain vulnerability or incident within the past year.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

68% of security leaders are concerned about the risks associated with third-party software tools and components integrated into their tech stacks.

68% of CISOs consider supply chain risk and generative AI security to be top concerns, viewing them as intertwined challenges that are redefining the attack surface.

47% of retail executives reported having very low to moderate visibility into their software supply chain.

80% of organizations with low visibility of their software supply chain view critical factors like custom code, commercial off-the-shelf software, and API integrations as "very risky" or "somewhat risky".

About half (49%) of companies say they lack the visibility to fully understand – or even identify – software supply chain risks.

40% of CEOs believe that the biggest security risk the organization faces today is from the software supply chain, compared with 29% of CIOs and 27% of CTOs.

Browse by Topic

Stay Ahead of Cyber Threats