Gone are the days when viruses simply corrupted your network, costing your organization time and money to clean up the damage. Today’s threats consist of ‘under the radar’ approaches which operate across email and the internet and are designed to get past traditional security tools. Email and web-based attacks like phishing and spyware cost business and consumers loss in productivity and system downtime, financial losses, and brand damage. This paper examines the true costs of these threats to business.