Yes, probably, and when a new web-related CVE drops the number of attacks targeted that CVE increases too. It's just the new orange...