28% of federal contractors had at least one observable malware infection or compromised device on their networks in the past year.