The distributed approach to cybercrime has forever changed the threat landscape. The WannaCry attack of 2017 is the perfect example of this approach in action. Because the approach so often reuses known methods, the set of attack vectors is relatively small. 85 percent of exploit traffic can be attributed to just 10 vulnerabilities, according to the Verizon Data Breach Incident Report. The other 15 percent consists of roughly 900 CVEs. By focusing on these small subsets of vulnerabilities amidst the millions in enterprise systems, organisations can maximise their own ROI.”]
Source: https://informationsecuritybuzz.com/study-research/6-steps-proactive-cyberthreat-response/