http://www-935.ibm.com/services/us/iss/xforce/trendreports/
In addition to standard vulnerability, malware, spam, phishing, and web threat statistics, the 2008 X-Force Threat and Risk Report features the following special topics:
- Exploitation Economics. Why some “critical” vulnerabilities may not be so critical.
- Web applications. The Achilles heel of corporate IT security.
- Better Browsers. More secure (if you update) but still the main exploitation target.
- Bad Web Links. More prolific for spam, phishing, and the delivery of malicious code.