Confidence among IT leaders is high, but hackers are abusing web-based attacks more than ever.