Identify what you think are two critical web application security weaknesses that the company should be aware of and provide a short statement on how the company can protect against them.

A software development company is looking to branch out into the world of mobile app development and has concerns about how to effectively secure their apps. The company has approached you for consultation on security.