Spyware edged out viruses, worms, and browser-embedded attacks as companies’ biggest IT security concern, according to a new survey.