Companies are under more pressure to develop new product functionality than they are to release secure software. Companies don't put enough effort into making their software more secure.