The total amount of malware and potentially unwanted software removed from computers grew more than 43 percent during the first half of 2008. The report notes that improvements in security for its Windows Vista operating system and security updates to the previous Windows XP system have made operating systems less of a target for the attackers. Attacks are being directed toward the application layer and away from the operating system, as more than 90 percent of vulnerabilities disclosed in the report affected applications, while only 10 percent affected operating systems like Windows Vista or Windows XP.”]
Source: https://www.cuinfosecurity.com/microsoft-security-report-applications-are-top-target-a-1039