Most breaches do not start with advanced attacks