77% of Firms Hit by Software Supply Chain Attacks in Past Year, Omdia Finds

A Docker-sponsored Omdia survey published on August 4 found that 77 percent of organizations experienced a software supply chain security incident in the preceding twelve months. Exploits targeting known vulnerabilities in third-party software remained the leading attack type at 38 percent, while AI has emerged as the top-ranked supply chain risk, cited by 40 percent of respondents. Reported consequences included unauthorized access to applications and data (46 percent), SLA disruptions during remediation (37 percent), and theft of developer credentials or secrets (35 percent). Omdia projects that third-party code will account for 58 percent of organizational codebases within a year, up from a current majority share reported by 38 percent of respondents. Sixty-two percent of teams anticipate increased supply-chain security spending in the next budget cycle, while 45 percent do not currently rate their own supply chain security as adequate.