The Hidden Security Risks of Business Applications