Which attack is the most common for companies?

Phishing. A convincing email is often the first step of a bigger attack.

More in the article: https://ntg.bg/en/blog/common-cyber-attacks