Kirkland, Wash. – October 14, 2026 -- Seventy-seven percent of security leaders expect an attacker to exploit a software vulnerability at their organization within 12 months, while 54% admit their companies knowingly leave high or critical vulnerabilities unpatched at least sometimes, according to a Chainguard report surveying 1,300 security leaders.