IBMs X-Force in the 2013 Mid-Year Trend and Risk Report: dull exploits like XSS and SQLi are still the top vectors for data breaches. IBM: Even in the midst of the most hectic multitasking, all medium and large enterprises should have a process to identify and mitigate those vulnerabilities before theyre exploited. Using vulnerability scanners to find assets (obviously), referencing DNS zone files, and asking procurement for expenses related to services, such as cloud.”]
Source: https://securityintelligence.com/apt-basics-sophisticated-threats-sqli-xss/