Application Security ‘Precrimes’ Report: SQL Injection, Crypto Hacks in 2013

The article summarizes Veracode’s 2012 State of Software Security and warns that SQL injection, cross-site scripting, and cryptographic implementation flaws will remain common threats in 2013; roughly one-third of tested applications had SQLi issues and the company predicts SQLi will be linked to about one-third of breaches. The piece emphasizes that while some progress (a modest drop in SQLi prevalence) has been made, overall application-security trends are flat and organizations must adopt secure coding practices to manage the steady influx of vulnerable web applications.