Akamai analyzed data gathered from users of its Web application firewall technology between November 2017 and March 2019. The report shows that SQL injection (SQLi) now represents nearly two-thirds (65.1%) of all Web application attacks. That’s up sharply from the 44% of Web application layer attacks that SQLi represented just two years ago. Credential-stuffing attacks using stolen credentials that were stolen from websites via SQL injection attacks are also on the rise. Most Web application-layer attacks originate from inside the US and most targets are US-based as well.”]