33.7% of IT and security decision-makers identified phishing and social engineering as the most common infiltration methods in their attacks.