Verizon DBIR: Vulnerability exploitation is the dominant initial access vector