According to Menlo Security, one out of three of the top million websites are either vulnerable to hacking or already hacked. The report found that 22 percent of the sites are running on vulnerable infrastructure. 4 percent of top websites are actively hosting malware and 3 percent are serving up spam or running botnets. The vulnerability rate stayed generally around 20 or so percent for most mainstream sites, including technology, business, shopping, entertainment, news, travel, finance, sports, and health. Some niche categories had vulnerability rates much higher, up to as much as 80 percent.”]
Source: https://www.csoonline.com/article/2900449/study-one-third-of-top-websites-vulnerable-or-hacked.html