Something is materially broken with web application security and, as a result, critical attacks are being missed. According to a new report from Kaspersky Lab, 73 percent of corporate network breaches in 2017 were achieved via vulnerable web applications. There are a variety of factors contributing to the problem: resource constraints, concerns over false positives and the sheer volume of the attack surface. The good news is that machine learning can be applied to help overcome these issues and strengthen application security. Most companies are failing to harness the full power of machine learning.