Cross-Site Scripting Still Number One Web Attack

Web applications are a common target for cyber attacks. And attacks are always evolving. That’s why one of the conclusions of a new report — that the venerable cross-site scripting attack is still the number one threat — stands out.

In the report, Web Application Attack Statistics, 2017 in Review, cross-site scripting is used in 31% of all web attacks. The next most common technique, SQL injection, is responsible for just over 20% of web attacks.

Book a demo today to see GlobalDots is action.

Optimize cloud costs, control spend, and automate for deeper insights and efficiency.

Book a demo today to see GlobalDots is action.

And the attacks keep coming. In a breakdown by industry, IT and finance companies each saw around 1,000 attacks per day during 2017.

Looking forward, the report, conducted by Positive Technologies, anticipates a sharp rise in hacking attempts around the upcoming World Cup tournament, which begins with Russia playing Saudi Arabia on June 14.

Close-up of an eye with digital data and visual elements overlay.
Image Source

Read more: Dark Reading

Latest Articles

In 2026, Most CDN Teams Still Find Out About Outages From Customers First

This post is based on a live panel webinar co-hosted by GlobalDots, Hydrolix, and AWS, where engineers and go-to-market leaders across CDN, edge, and agentic AI operations discussed what actually happens when delivery infrastructure breaks. Just five people on the call talking about where visibility fails today, and what changes once agents start watching the […]

Eduardo Rocha
15th July, 2026
From Alert to Action: A CDN & Edge Practitioners Summit

Most teams still learn about a CDN problem from a customer rather than from their own monitoring stack.In this panel, GlobalDots, Hydrolix, and AWS break down why that keeps happening and what it takes to fix it: full-fidelity data instead of sampled logs, and AI agents that can actually act on it. Full Webinar: Demo […]

Eduardo Rocha
15th July, 2026
The Security Blind Spot: Business Logic Failures and How to Catch Them

Security leaders know the drill: vulnerability scanners run their course, reports stack up, and yet attackers still slip through. What’s going wrong? We sat down with Yosef Yekutiel, CISO & Data Privacy Officer at MaccabiDent, at GlobalDots’ recent “Red Team Reality Check” event to unpack this gap, and how modern offensive security can fill it. […]

Ganesh The Awesome
27th August, 2025

Unlock Your Cloud Potential

Schedule a call with our experts. Discover new technology and get recommendations to improve your performance.

    GlobalDots' industry expertise proactively addressed structural inefficiencies that would have otherwise hindered our success. Their laser focus is why I would recommend them as a partner to other companies

    Marco Kaiser
    Marco Kaiser

    CTO

    Legal Services

    GlobalDots has helped us to scale up our innovative capabilities, and in significantly improving our service provided to our clients

    Antonio Ostuni
    Antonio Ostuni

    CIO

    IT Services

    It's common for 3rd parties to work with a limited number of vendors - GlobalDots and its multi-vendor approach is different. Thanks to GlobalDots vendors umbrella, the hybrid-cloud migration was exceedingly smooth

    Motti Shpirer
    Motti Shpirer

    VP of Infrastructure & Technology

    Advertising Services

    GlobalDots guided our migration to Cloudflare, implemented SSL for SaaS, eliminated certificate maintenance, and remained highly responsive throughout.

    Chris Cutajar
    Chris Cutajar

    Infrastructure Eng. & Security Manager