A lot of the stories @Scott_Helme shares are caused by terrible web application security.
It's never a wrong time to revisit the @owasp top 10: https://www.owasp.org/index.php/Category:OWASP_Top_Ten_Project https://twitter.com/coderbyheart/status/1110220835640524800