Report: Applications and critical data vulnerable to attack