New surveys and reports discuss trends for 2009 and conclude that attacks will escalate in number and variety, outsourcing will represent the biggest threat, and attacks on databases will continue.