Here's a list of the flaws Russia, China, Iran and pals exploit most often, say Five Eyes infosec agencies