Barracuda launches State of Application Security 2021 report

Organisations are struggling with bad bots, broken APIs, and supply chain attacks according to Barracuda Network's latest study.

Barracuda, provider of cloud-enabled security solutions, today released key findings from a report titled The state of application security in 2021. The research surveyed 750 application security decision makers in the US, EMEA and APAC responsible for their organisation's application development and security, to get their perspectives on data breaches, top application security vulnerabilities and the most important product capabilities needed to defend against multi-vector application attacks. 

Overall, the findings indicate that more needs to be done to protect against application security threats, particularly newer threats like bot attacks, API attacks, and supply chain attacks. Highlights from the report include: 

  • On average, respondent organisations were successfully breached twice in the past 12 months as a direct result of an application vulnerability. 
    • 72% of respondents say their organisation suffered at least one breach from an application vulnerability.
    • 32% say their organisation suffered two breaches due to an applications vulnerability.
    • 14% were breached three times due to application vulnerabilities.
  • The range of application security-related challenges facing organisations extends beyond difficulties securing multiple attack vectors.
    • Respondents identified their top application security challenges as bad bots (43%), software supply chain attacks (39%), vulnerability detection (38%), and securing APIs (37%).
  • Bot-based attacks are the most likely contributor to successful security breaches resulting from application vulnerabilities in the past 12 months. 
    • 44% of respondents say bot attacks contributed to a successful security breach that exploited a vulnerability in the organisation's applications in the last 12 months.

Tim Jefferson, SVP, Engineering for Data, Networks and Application Security at Barracuda says: "Applications have been steadily rising as one of the top attack vectors in recent years and the rapid shift to remote work in 2020 only intensified this. Organisations are struggling to keep up with the pace of these attacks, particularly newer threats like bot attacks, API attacks, and supply chain attacks, and they need help filling these gaps effectively."



Featured Articles

How secure is sensitive data stored in the cloud?

A Cloud Security Alliance (CSA) survey has found 67% of organisations store sensitive data in public cloud environments, but how secure is it?

CYBER LIVE LONDON: Day 2 highlights of the hybrid tech show

We take a look at highlights of the different stages at the Tech Live London show, including insights from Claroty, SalesForce and Oracle

TECH LIVE LONDON: An overview of the hybrid technology show

We take a look at the first day of Tech Live London with insights from technology leaders from companies such as IBM, Microsoft and Vodafone

Does a cashless society mean higher risk of fraud?

Cyber Security

5 minutes with Gary Brickhouse, CISO of GuidePoint Security

Cyber Security

CTO at Passbolt explains the importance of password managers

Application Security