Many companies still underestimate the importance of web application security in their cybersecurity and risk management strategy. PwCs Global State of Information Security Survey 2016, in 2015 companies detected 38 percent more security incidents than in 2014. The vast majority of Advanced Persistent Threats (APT) gain their first foothold inside target companies by sending a few emails. Here are five most common reasons why almost any website or web application today can be so easily compromised: Underestimation of risks and threats related to unsecure web applications.”]
Source: https://www.csoonline.com/article/3007579/five-reasons-why-hackers-easily-get-in.html