The data shows how most cyberattacks start, so basic steps can help organizations avoid becoming the latest statistic.