According to the "2008 Data Breach Investigations Report" by Verizon Business, attacks to the application, software and services layer are now much more commonplace than operating system platform exploits. Read the complete report at here