Question about the stat that 70% of breaches start with a vulnerability a scanner already flagged
Saw that number in a Veracode report last week and it kind of blew my mind, because it means the finding was sitting right there in a report nobody read. Anyone else seeing teams drown in scan output and just triage by whatever the tool ranks highest?