Security institute SANS released its latest 20 most critical vulnerabilities list, warning of new attacks that are focused on applications, including backup and media software, and of hackers’ increasing ability to embed attacks in sites to snare users simply visiting them. The latest list of vulnerabilities includes software from a range of vendors, including Microsoft,…