Client Apps: The Security Problem

The point this article makes is that client side application vulnerabilities are major cause of concern.

It does not come as a surprise to security practitioners. The security of transport (primarily with SSL) has been in place for a long time, so attackers have moved to the weakest link in the chain i.e. client applications and users. Attackers utilize the fact that client applications are inherently trusted and users are gullible. Most of the applications are not coded with security in mind and not even tested against security vulnerabilities. So, it is no wonder that they are easy to compromise.