5. Web App Attacks

Web app attacks accounted for 9.4 percent of confirmed breaches and 4.1 percent of incidents overall, driven by a motive for financial gain, the report said. Two-thirds of those attacks were secondary attacks, meaning they were designed to get access to some other primary data, and nearly every attack, 98 percent, was opportunistic. Some top web app attacks included use of stolen credit cards, 50.7 percent; use of back door or C2, 40.5 percent; and SQLI, 19 percent. To fight back against web app attacks, the report recommended tracking user behavior, keeping logs, inventory, and patch web inventory and strengthen authentication.