30 SSCS statistics that matter for software security teams