Unconsidered Attack Surface for Web Platforms(blog.trendmicro.com)

http://blog.trendmicro.com/q3-report-unconsidered-attack-surface-web-platforms/