From Search Security:
Security vendors often claim that attackers behave in unpredictable ways, but two of the researchers behind Verizon's annual Data Breach Investigations Report (DBIR) believe vendors can't spot emerging attack trends because they don't use modern data analysis techniques.
Damage caused by simple attacks, slow detection
For all the industry discussion about the evolution of so-called advanced cyberattacks, data ... indicates a select few attack types are responsible for the majority of last year's reported breaches. Despite that consistency, the majority of organizations fail to identify breaches until months after the initial compromise.