Why web apps are one of this year's leading attack vectors