According to an extensive Sophos survey conducted among 3,100 IT decision-makers across 12 countries, many companies continue to suffer cyberattacks “despite good intentions and behaviors.” In fact, 68% of the firms in the survey were at the receiving end of a cyberattack last year. Yet 91% of the targeted firms were relying on up-to-date endpoint protection solutions, and the average IT team spends 26% of its time dealing with cybersecurity issues.

The most common attack vectors include email (33%), web (30%), software flaws (23%) and the use of unauthorized USB flash drives or other external devices (14%). Strikingly, one in five (20%) respondents said they didn’t actually know how the attackers obtained access to the company network.