Middle East faces new cyber reality: attackers logging in, not breaking in