A large bank’s security leader that I spoke with said their team was managing over 220,000 lines of dependency data, with the fixes owned by dozens of application teams moving at different speeds. Some of the flagged components can take more than a year to upgrade. Their tools made finding vulnerabilities far easier, but they didn’t make any of them faster to fix.
Forbes ·