Google made a study in 2007 that stated: "SMART models are more useful in predicting trends for large aggregate populations than for individual components."
I'm a huge fan of Security Now podcast: https://www.grc.com/securitynow.htm. It's not a software engineering podcast per se but it gives detailed explanations of security breaches found in software. So I recommend y'all check it out.