Developers: is training taking a back seat?

Security threats are rising fast, so why are fewer dev teams getting trained to fight them?