for instance, the top three ways hackers gained initial access to corporate networks in 2009 were via remote access applications, trusted internal network connections and sql injection attacks, trustwave found.
All three attacks points have been well researched for several years.